Not a sysadmin, but working at a small company wearing multiple hats. The company uses Office 365 (can't change that) and I would like to add 2FA with master passwords to access different applications and APIs (we are using around 30 cloud solutions). I was referred to the combo of 1password.com (too expensive) or bitwarden + Authy.
However, I noticed that this is part of our package with Microsoft:
https://azure.microsoft.com/en-us/pricing/details/active-directory/
- User provisioning
- Federated Authentication (ADFS or 3rd party IDP)
- User and group management (add/update/delete)
- Device registration
- Cloud Authentication (Pass-Through Auth, Password Hash sync, Seamless SSO)
- Azure AD Connect sync (extend on-premises directories to Azure AD)
- Self-Service Password Change for cloud users
- Azure AD Join: desktop SSO & administrator bitlocker recovery
- Password Protection (global banned password)
- Multi-Factor Authentication 3
- Azure AD features for guest users4
- Group access management
- Self-service password reset for cloud users
- Device write-back (device objects two-way synchronization between on-premises directories and Azure)
Our stack is:
- Gitlab - gitlab.com for Version Control with CI/CD
- Github - for version control
- Digital Ocean
- UIpath uipath.com for automating Desktop Dongle testing
- Sendgrid
- FedEx API and Fedex Web
- Amazon S3 bucket
- Stripe - stripe.com
- Atlassian Confluence - confluence.atlassian.com
- Atlassian Jira - jira.atlassian.com
- TeamViewer
- Postman - getpostman.com
- Zendesk
- Adobe Cloud
- Mailchimp for email marketing
- Mautic for marketing automation self-hosted
- 3 Wordpress websites
- Sugar CRM
- Dropbox – Could have some old stuff
- Social Media Accounts like Linkedin, Facebook, Instagram
- Airtable - airtable.com
- Digital Ocean VPS
- Azure Server
- Unity 3D
- Unreal Engine
Question: is it safe and the right solution?
Challenge: reduce footprint, reduce managing custom applications, reduce cost, security, people generating easy password to not forget or resetting all the time because they forgot
I'm trying to leverage an existing Microsoft service we pay for as opposed to introducing 2 more applications and having to manage them
[link] [comments]
SOCIAL SHARE CARD GENERATOR