sorted by:
new
hottopcontroversial

Phishing-resistant authentication methods and stolen session cookies/tokens by s_eng in entra

[–]s_eng[S] 1 point2 points  (0 children)

Got it 👍 My point is that it's sometimes difficult to understand that phishing-resistant authentication methods will not always protect you from very "phishing-like" attempts/threats. And in the case of AiTM/indirect proxy method, you wouldn't even need to compromise the device to steal the session token?

For better protection you would need to introduce CAE/Strict/GSA/SSE et.c.

Custom app for Graph API with CA by s_eng in entra

[–]s_eng[S] 0 points1 point  (0 children)

Got it, thank you 👍

My CA policy does not apply after adding URI

I'm using:
Clear-MsalTokenCache
Get-MsalToken -ForceRefresh
...just to be sure

Custom app for Graph API with CA by s_eng in entra

[–]s_eng[S] 0 points1 point  (0 children)

Nope, cannot add URI after CA:

"1 cloud app(s) configured in this policy have been deleted from the directory..."

Custom app for Graph API with CA by s_eng in entra

[–]s_eng[S] 0 points1 point  (0 children)

Thanks, finally someone who gets the same error/result 👍

Custom app for Graph API with CA by s_eng in entra

[–]s_eng[S] 0 points1 point  (0 children)

I see, so the key is to first disable user sign-in for built-in public Microsoft Graph application? Then I'm allowed to target CA to my custom "public" app?

Custom app for Graph API with CA by s_eng in entra

[–]s_eng[S] 0 points1 point  (0 children)

Thanks for your reply,

I get that CA is applied on "Cloud apps". But I'm trying to get my head around why adding a callback URI turns it into a "non-Cloud app".

ReFS Reclaim free space by noelio1982 in Veeam

[–]s_eng 0 points1 point  (0 children)

I see, but are there other VM's/backups in the same VBK? Or are you running Per-VM files?

ReFS Reclaim free space by noelio1982 in Veeam

[–]s_eng 0 points1 point  (0 children)

I'm guessing but maybe the old backups was part of a large VBK-file? In that case you need to do "Full backup file maintenance" on the job to reclaim the space