『M365.FM - Modern work, security, and productivity with Microsoft 365』のカバーアート

M365.FM - Modern work, security, and productivity with Microsoft 365

M365.FM - Modern work, security, and productivity with Microsoft 365

著者： Mirko Peters - Founder of m365.fm m365.show and m365con.net
無料で聴く

Welcome to the M365.FM — your essential podcast for everything Microsoft 365, Azure, and beyond. Join us as we explore the latest developments across Power BI, Power Platform, Microsoft Teams, Viva, Fabric, Purview, Security, and the entire Microsoft ecosystem. Each episode delivers expert insights, real-world use cases, best practices, and interviews with industry leaders to help you stay ahead in the fast-moving world of cloud, collaboration, and data innovation. Whether you're an IT professional, business leader, developer, or data enthusiast, the M365.FM brings the knowledge, trends, and strategies you need to thrive in the modern digital workplace. Tune in, level up, and make the most of everything Microsoft has to offer. M365.FM is part of the M365-Show Network.

Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support.Copyright Mirko Peters / m365.fm - Part of the m365.show Network - News, tips, and best practices for Microsoft 365 admins 政治・政府 毎時
エピソード
  • Entra Workload Identities - Simply Explained

    Entra Workload Identities - Simply Explained
    2026/08/05
    Modern cloud environments are no longer accessed only by people. Applications, automation workflows, Azure services, DevOps pipelines, AI agents, and background jobs all require secure access to business resources without relying on human interaction. In this Microsoft Knowledge Nuggets episode, Mirko Peters explains Microsoft Entra Workload Identities in plain English, showing how software securely authenticates to Microsoft 365, Azure, Microsoft Graph, and enterprise services without storing usernames and passwords inside code. Whether you're an Azure administrator, cloud architect, developer, DevOps engineer, or Microsoft consultant, this episode provides a practical foundation for understanding secure application authentication.UNDERSTANDING USER IDENTITIES VS WORKLOAD IDENTITIESMicrosoft Entra ID manages both human users and software identities, but they operate very differently. Human identities authenticate using passwords, passkeys, Windows Hello, and multi-factor authentication, while applications require non-interactive authentication methods that operate continuously without user involvement. Workload identities provide applications with their own unique digital identity, allowing Microsoft Entra ID to authenticate software independently from human accounts. This separation improves security, eliminates shared service accounts, increases auditing capabilities, and allows every application, automation, or AI workload to receive only the permissions required for its specific business purpose.APP REGISTRATIONS, SERVICE PRINCIPALS, AND MANAGED IDENTITIES EXPLAINEDThree Microsoft Entra concepts frequently confuse administrators: Application Registrations, Service Principals, and Managed Identities. This episode clearly explains the relationship between these components. Application Registrations define the global identity of an application and describe the permissions it may request. Service Principals represent the application's local identity within an individual Microsoft Entra tenant, where administrators grant permissions and enforce security controls. Managed Identities extend this model by allowing Azure resources such as Azure Functions, Logic Apps, Virtual Machines, and App Services to authenticate automatically without developers managing secrets, passwords, or certificates. Together, these identity models create the secure authentication foundation for modern cloud-native applications.HOW MANAGED IDENTITIES ELIMINATE PASSWORDSOne of the most significant security improvements in Microsoft Azure is the ability to authenticate workloads without embedding credentials inside applications. Instead of storing passwords, client secrets, or connection strings within source code, Azure resources using Managed Identities request short-lived access tokens directly from Microsoft Entra ID. The episode explains how authentication and authorization work together, how Azure Key Vault integrates with Managed Identities, and why temporary access tokens dramatically reduce the risks associated with credential theft, secret leakage, source code exposure, and long-lived authentication credentials.SECURING WORKLOAD IDENTITIES IN MICROSOFT AZUREWorkload identities require governance just like privileged user accounts. The discussion explores the importance of least privilege access, Conditional Access for workload identities, workload identity federation, certificate-based authentication, Microsoft Entra ID Protection, logging, monitoring, lifecycle management, and ownership. Mirko explains why every workload identity should have a clearly assigned owner, minimal permissions, continuous monitoring, and regular security reviews. Organizations that neglect application identities often leave behind unused service principals, forgotten secrets, excessive permissions, and automation that continues operating long after the original project has ended.CHOOSING THE RIGHT IDENTITY STRATEGY FOR EVERY WORKLOADSelecting the correct authentication model depends largely on where the application executes. Azure-hosted services should generally use System-Assigned or User-Assigned Managed Identities whenever possible. Applications running outside Azure, including GitHub Actions and external cloud platforms, benefit from Workload Identity Federation instead of long-lived client secrets. Custom enterprise applications often require Application Registrations and Service Principals, while certificates provide a more secure alternative to client secrets when Managed Identities are unavailable. By combining Microsoft Entra Workload Identities, Azure Key Vault, Microsoft Graph, Zero Trust principles, and least privilege access, organizations can significantly strengthen application security while simplifying authentication across Microsoft 365 and Azure environments.Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support.
    続きを読む 一部表示
    17 分
  • Azure Platform Engineering, Azure Landing Zones, Cloud Adoption Framework & Building Enterprise Cloud Platforms Jev Suchoi [MVP]

    Azure Platform Engineering, Azure Landing Zones, Cloud Adoption Framework & Building Enterprise Cloud Platforms Jev Suchoi [MVP]
    2026/08/05
    Moving workloads into Microsoft Azure is only the beginning of a successful cloud journey. Building a cloud platform that is secure, scalable, automated, and developer-friendly requires a completely different mindset. In this episode of M365.FM, Microsoft MVP Jev Suchoi explains how Platform Engineering helps organizations build reusable cloud foundations that enable innovation while maintaining governance, security, and operational excellence. The discussion explores Azure Landing Zones, Infrastructure as Code, Cloud Adoption Framework, DevOps, automation, and modern enterprise cloud architecture through practical real-world experience.

    UNDERSTANDING AZURE LANDING ZONES AND CLOUD FOUNDATIONS
    Azure Landing Zones provide the standardized architecture that allows organizations to deploy workloads consistently across Microsoft Azure. Jev explains how Landing Zones establish networking, identity, security, governance, subscriptions, policies, and management services before application teams begin deploying workloads. Rather than treating Azure like a traditional datacenter, organizations should build cloud-native platforms designed for scalability, automation, and self-service. The conversation also explains why Microsoft's Enterprise Landing Zone architecture serves as an excellent starting point while still requiring customization for individual business requirements.

    MICROSOFT CLOUD ADOPTION FRAMEWORK AND WELL-ARCHITECTED DESIGN
    The Microsoft Cloud Adoption Framework offers far more than technical guidance. It provides a comprehensive roadmap covering business strategy, governance, security, organizational change, operations, and cloud architecture. Jev discusses how organizations should gradually introduce the framework without overwhelming teams, allowing architects, operations teams, and security specialists to focus on the areas most relevant to their roles. The episode also explores how the Azure Well-Architected Framework complements Cloud Adoption Framework by helping architects design highly available, secure, reliable, performant, and cost-optimized cloud workloads.

    AUTOMATION, INFRASTRUCTURE AS CODE, AND MODERN GOVERNANCE
    Automation sits at the center of every successful Azure platform. Infrastructure as Code enables organizations to deploy consistent environments, improve compliance, reduce configuration drift, and implement security earlier in the deployment lifecycle. Jev explains how Bicep, Terraform, Azure Verified Modules, Azure Policy, and automated guardrails allow platform teams to create repeatable cloud environments while reducing operational risk. Listeners also learn how proactive governance replaces traditional reactive operations through policy enforcement, remediation, monitoring, and standardized deployment practices.

    BUILDING SELF-SERVICE PLATFORMS DEVELOPERS LOVE
    Platform Engineering is ultimately about creating internal platforms that enable development teams to deliver business value faster. Instead of becoming operational bottlenecks, platform teams should provide self-service capabilities, reusable templates, deployment pipelines, standardized environments, and automated security controls. Jev explains why developers should be viewed as customers of the platform and how organizations can balance flexibility with governance by providing clear guardrails rather than unnecessary restrictions. The discussion also covers GitHub, Azure DevOps, Internal Developer Platforms, and why successful platforms focus on enabling developers instead of competing with the Azure Portal.

    AI, CLOUD OPERATIONS, AND THE FUTURE OF ENTERPRISE AZURE
    Artificial Intelligence is rapidly changing the daily work of cloud engineers and platform architects. Jev shares how GitHub Copilot accelerates Infrastructure as Code development, improves productivity, and assists experienced engineers while emphasizing the importance of architectural knowledge and critical thinking. The conversation concludes with practical advice on cloud adoption, governance, platform engineering, Azure security, automation, developer experience, and why organizations should automate repetitive tasks while allowing engineers to focus on solving complex business challenges. The key takeaway is simple yet powerful: automate the boring work so people can concentrate on innovation.

    Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support.
    続きを読む 一部表示
    1 時間 3 分
  • Microsoft Entra Verified ID - Simply Explained

    Microsoft Entra Verified ID - Simply Explained
    2026/08/05
    Modern identity security extends far beyond passwords and multi-factor authentication. While Microsoft Entra ID, passkeys, and MFA help verify that someone controls a sign-in method, they cannot prove important real-world facts such as employment status, completed security training, professional certifications, contractor relationships, or verified identity during account recovery. In this Microsoft Knowledge Nuggets episode, Mirko Peters explains Microsoft Entra Verified ID in plain English, showing how organizations can replace manual document verification with secure, privacy-friendly digital credentials that improve trust while reducing administrative effort.UNDERSTANDING MICROSOFT ENTRA VERIFIED IDMicrosoft Entra Verified ID enables organizations to issue, store, and verify digital credentials based on open standards for decentralized identity. Instead of emailing PDFs, screenshots, certificates, or identity documents, trusted organizations issue digitally signed credentials that individuals securely store inside the Microsoft Authenticator app. These credentials contain verified claims such as employee status, completed training, professional licenses, student enrollment, or supplier relationships. When another organization requests proof, users decide whether to share the required information while the verifier can validate the credential's authenticity, issuer, expiration date, and revocation status without relying on manual phone calls or email confirmations.ISSUERS, HOLDERS, AND VERIFIERS: THE VERIFIED ID MODELEvery Microsoft Entra Verified ID solution follows a simple three-party trust model. The issuer creates and digitally signs the credential after validating information from trusted business systems. The holder receives and securely stores the credential in their digital wallet within Microsoft Authenticator. The verifier requests specific claims to support a business decision such as granting access, approving onboarding, confirming qualifications, or validating identity during sensitive operations. This model significantly reduces document handling, minimizes unnecessary sharing of personal information, and creates a more secure verification process that scales across organizations.FACE CHECK AND HIGH-ASSURANCE IDENTITY VERIFICATIONFor higher-risk scenarios, Microsoft Entra Verified ID introduces Face Check to strengthen identity verification. Face Check compares a live selfie with the photo stored inside the verified credential, helping organizations confirm that the individual presenting the credential is the legitimate credential holder. The episode explores practical use cases including remote employee onboarding, privileged account recovery, contractor verification, privileged access requests, and high-security administrative operations. Combined with Microsoft Entra ID, Face Check provides stronger protection against impersonation attacks, deepfakes, stolen devices, and social engineering while supporting Zero Trust identity principles.PRACTICAL MICROSOFT 365 USE CASES FOR VERIFIED IDMicrosoft Entra Verified ID integrates naturally with Microsoft 365 identity and governance scenarios. Organizations can automate remote onboarding, simplify secure account recovery, validate contractor relationships, confirm training completion before granting access to sensitive projects, and verify qualifications without exchanging physical documents. Combined with Microsoft Entra Access Packages, Microsoft Teams, SharePoint Online, enterprise applications, and Microsoft Entra role assignments, Verified ID enables organizations to make access decisions based on trusted business facts instead of manual document reviews. This reduces administrative overhead while improving both security and user privacy.BUILDING A TRUSTED DIGITAL IDENTITY STRATEGYSuccessfully implementing Microsoft Entra Verified ID requires careful planning around credential issuance, trusted issuers, claim definitions, expiration policies, revocation processes, governance, and user experience. Organizations should begin with a single business scenario that already involves manual identity verification, establish clear trust relationships, define credential lifecycles, and gradually expand their implementation. As digital identity continues evolving, Microsoft Entra Verified ID provides a scalable foundation for privacy-preserving verification that complements Microsoft Entra ID, MFA, passkeys, and Zero Trust architecture while helping organizations modernize identity proofing across employees, partners, contractors, students, and customers.Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support.
    続きを読む 一部表示
    18 分
adbl_web_anon_alc_button_suppression_t1
まだレビューはありません