4 ms·
Recently tried using Entra ID. There are 12 ways to enforce MFA, 20 days ways to disable users, 4 ways to authenticate users, Add conditional access stuff with
by debarshri 7mo ago
Recently tried using Entra ID. There are 12 ways to enforce MFA, 20 days ways to disable users, 4 ways to authenticate users, Add conditional access stuff with 50 variables and templates etc.
You can customize the way you want. After configuring it, my colleagues could not log in. Thats one way to secure your organization.
- yoyohello13 7mo agoThat’s Microsoft. 1000s of features and none of them really work the way they are supposed to.
- b0rgedhuman 7mo ago[dead]
- ploxiln 7mo agoit's "Enterprise" grade software! need to check the boxes for the procurement process (actually working is a separate department)
- yoyohello13 7mo agoExactly! I can’t even count the number of times we’ve been in the discovery phase of a project and see “Oh this MS product does that! Cool”. Then when we get to the actual implementation realize it’s a broken mess. It’s sales driven software development, they just need to get you far enough along to sign the contract, then it’s too late to back out.
- joezydeco 7mo agoThere are extra ways to do that, but they're on a document deep in a Sharepoint directory that you can't access.
- debarshri 7mo agoMoments like this, I miss clippy.
- deleted 7mo ago[deleted]
- jjtheblunt 7mo agosame experience for us, and then they email the living shit out of you about how your weekly entra id stats are good or bad, and you can not opt out of these emails.
- lostlogin 7mo ago> they email the living shit out of you This sounds like LinkedIn.
- debarshri 7mo agoWait a minute. It is owned by Microsoft.
- lostlogin 7mo agoIt’s a relentless horror. I signed my wife up to track down a driver that crashed into her. I think LinkedIn spam is worse than being in a crash.
- hsbauauvhabzb 7mo agoCtrl + Shift + Alt + Windows Key + L
- hedora 7mo agoSame here, except with Minecraft and XBox One. I don’t understand how they have non-zero market share.
- alexpotato 7mo agoFor Minecraft they inherited a gigantic userbase from Mojang and then made it 10x harder to add new users.
- genthree 7mo agoI did it for my kids to have accounts and I do not understand how anyone who hasn't built a Gentoo from Stage 1 has a prayer of managing to buy Minecraft Java Edition for their kid, and making it actually work. Then you've got the hell of overlapping permissions systems on the console and the Microsoft account, to get any amount of online play working on a console if you also get Bedrock. On the Playstation, especially, the error messages also love to not tell you which of the two systems is blocking you, so you get to guess. And Microsoft's site for managing those permissions is so confusingly-laid-out that even after doing it three times in a row I still felt lost on it. I never did solve the problem of getting Minecraft Java Edition to run on a kid's MacBook with allowlist-only Web access. It wants to contact ten or so apparently-randomly-selected-from-an-enormous-pool IP addresses on every launch. I never did find documentation of which IP blocks I needed to allow, and couldn't guess at it from the IPs themselves. If they'd just used domain names... I must have manually hit "allow" a bunch of times during twenty separate launches, and it was still presenting me the same number of prompts every time, because there was no overlap in the IPs contacted (adding insult to injury is that I'm sure all but at-most two of these were spyware horse-shit that had no actual generously-necessary role in running the software, but it'd fail if it couldn't reach them)
- asdff 7mo agoI was supposed to have a license through my alpha build purchase but microsoft made it impossible to transfer over. So now I just see it as my right to pirate the game until the end of time.
- mastax 7mo agoOut of all the SSO login flows Microsoft has to have the buggiest. It’s the only one I can remember routinely having issues with. Why are there so many redirects? And why doesn’t the “remember me” checkbox ever work?
- bombcar 7mo agoI've always assumed the billions of redirects are setting cookies so all the various systems "work" but I have given up trying to understand it.
- CDSlice 7mo agoIt is also the only SSO flow I have ever seen that fundamentally cannot work if you have more than one account remembered on your device. So far the only way I’ve found to get it to let you log out of account A and then log into account B is to clear all cookies otherwise it gives you permission denied errors. Have no idea how it can be this horrible
- throwway120385 7mo agoYeah I have had this experience too. Woe betide ye if your company gets bought by another company with pre-existing Azure AD.
- rgblambda 7mo agoWould container tabs solve that? They're pitched as helping separate work and personal logins.
- SoftTalker 7mo agoI just run completely separate browser profiles to separate work and personal stuff. And I still sometimes need private mode or a throwaway profile to get some random thing to work.
- SSLy 7mo agoFirefox's? Yep. Edge's? Bloody hell no.
- Pxtl 7mo agoThe problem is modern MS doing three contradictory things at the same time: - FB's move fast and break things. Constantly launching new libs. - Linus's we do not break user space. Great commitment to backwards compatibility. - Never deprecating dead products until they've been de facto abandoned for like decades. This combination means every MS product is a labyrinth of overlapping APIs with no guidance as to which one is actually the good one. Some are abandoned garbage, some are brand new and incomplete, and some are both, and there's no way of knowing which are which even experts can mislead you.
- b0rgedhuman 7mo ago[dead]
- 0cf8612b2e1e 7mo agoWell said. It feels like Microsoft is willing to release the intern’s poorly thought out product, and then commits to support the garbage design for all time. Microsoft, you are a behemoth. There are few domains where you actually compete. Give your products a minute to breath before you cast them in stone.
- DANmode 7mo ago> no guidance as to which one is actually the good one. To some extent, you’re/we’re the ones deciding that, because there’s entirely different teams heading the separate offerings, and none of them are going to offer a potential footgun like: “hey, we’re not the best modern path into xyz type projects, check with our colleagues on the Blazor team”, unless someone makes them.
- gopher_space 7mo ago> and there's no way of knowing which are which Especially not after the last round of cuts, some of the people they let go made my jaw drop.
- DeathArrow 7mo agoI ripped Entra ID from one of our projects and replaced it with Keycloak.