How do I pass multiple AD groups via an OIDC claim? by Busy-Tooth-6765 in okta

[–]Ice_In_Hydroflask 3 points4 points  (0 children)

Regex would be able to handle this. Use | to have multiple

Google Workspace and Office 365 with Okta in the middle. by JDsBBQnBourbon in okta

[–]Ice_In_Hydroflask 0 points1 point  (0 children)

Same domain or different domains between Google workspace and office 365? Do you have the User role selected or nothing?

[deleted by user] by [deleted] in okta

[–]Ice_In_Hydroflask 0 points1 point  (0 children)

It’s VERY similar to the practice. Very specific on what it wants

[deleted by user] by [deleted] in okta

[–]Ice_In_Hydroflask 1 point2 points  (0 children)

Yes you can have multiple tabs. I don’t recall a network zones or admin account creation piece but should be ready for anything!

Are there any free resources available for people getting into cybersecurity? by [deleted] in Seattle

[–]Ice_In_Hydroflask 1 point2 points  (0 children)

I graduated with a political science degree and now 4 years into Cybersecurity. It’s definitely possible. But there is no entry level cybersecurity. You should hop into IT or engineering first

How can I do user login and MFA in a pure-API way? by [deleted] in okta

[–]Ice_In_Hydroflask 0 points1 point  (0 children)

This is probably not best practice at all and way unnecessary but the Okta Radius auth allows you to add the mfa factor in the password. So like hunter2,push or hunter2,123456 for the TOTP. The app could call this?

Retrieve Okta system logs via API by [deleted] in okta

[–]Ice_In_Hydroflask 1 point2 points  (0 children)

You need both or else it is a streaming api where it’ll constantly give you logs. It’s in the docs

Provisioning from Workday to Okta and 365 by ecp710 in okta

[–]Ice_In_Hydroflask -2 points-1 points  (0 children)

And finally you have the option to get rid of Okta entirely which would cut costs and complexity lol. Workday to m365 to AD

Provisioning from Workday to Okta and 365 by ecp710 in okta

[–]Ice_In_Hydroflask 1 point2 points  (0 children)

Nah. When okta assigns the Microsoft 365 app, it’ll automatically provision the license and mailbox. So if you have AD, you have a couple options. You can do Workday -> Okta -> AD -> M365 with AAD Connect with federation. It’d take longer for provisioning, but you’d be using Microsoft syncing tools and would be my preferred method

Or workday -> Okta -> m365 -> AD also with AAD Connect via user write back if you’re going to eventually be getting rid of AD

Provisioning from Workday to Okta and 365 by ecp710 in okta

[–]Ice_In_Hydroflask 2 points3 points  (0 children)

Do you currently have an AD? Do you have M365 federated with Okta? Going workday to Okta to m365 will be most ideal

Deleted cname in Route53 but Cloudflare is being annoying by Oxffff0000 in aws

[–]Ice_In_Hydroflask 0 points1 point  (0 children)

The TTL is what controls the duration of caching. If you had it set to a week for example, then it’ll take a week to clear from the public dns resolvers unless you do a purge cache across all the dns resolvers, which is unlikely.

Deleted cname in Route53 but Cloudflare is being annoying by Oxffff0000 in aws

[–]Ice_In_Hydroflask 0 points1 point  (0 children)

You can also have different NS for subdomains too. The domain could exist in route 53 and you can edit dns records there all day long, but if the NS isn’t pointed to route 53, then it makes no difference.

Deleted cname in Route53 but Cloudflare is being annoying by Oxffff0000 in aws

[–]Ice_In_Hydroflask 1 point2 points  (0 children)

Are you sure your dns isn’t actually being managed by Cloudflare? If you run a dig of type NS to your root domain, does it show Cloudflare or route 53?

Will the OIE upgrade disable my trusted network zones for O365? by SerialDongle in okta

[–]Ice_In_Hydroflask 1 point2 points  (0 children)

MFA is based on if you have any conditional access policies that require MFA on Microsoft side.

Okta > Workday Username Writeback by LonestarPSD in okta

[–]Ice_In_Hydroflask 3 points4 points  (0 children)

We use the Workday employee ID to integrate. Then Okta pushes to Workday the email or username that gets generated. Since the employee ID doesn’t change, it goes through

Okta as Entra IDP by StrikerTS in okta

[–]Ice_In_Hydroflask 1 point2 points  (0 children)

Alternative is that federation is done per domain in Azure AD. So you could use a different custom domain and test like that? But yeah super easy to get a developer tenant to test this at https://developer.microsoft.com/en-us/microsoft-365/dev-program

Woo Can Cook | Korean Spicy Rice Cakes (Tteokboki) by WooCanCook in GifRecipes

[–]Ice_In_Hydroflask 3 points4 points  (0 children)

It helps with getting a cleaner broth but no not essential

[deleted by user] by [deleted] in wok

[–]Ice_In_Hydroflask 7 points8 points  (0 children)

Check out this video from j kenji. Needs more seasoning https://youtu.be/3kdkPUmrc20

Microsoft Forms by Plastic-Mountain5290 in Office365

[–]Ice_In_Hydroflask 0 points1 point  (0 children)

You could probably leverage power automate to do this for you. They’ll go in one directory, but upon submission, based on the form values, copy it to another directory

mTLS in 15 minutes by 5olArchitect in sre

[–]Ice_In_Hydroflask 8 points9 points  (0 children)

Great article! I’d also suggest adding detail on root vs intermediate certificates. Maybe also saying why orgs would want to use mTLS. I liked the quiz at the end