VPN integration with Entra authentication
Overview
Modern VPN supports SAML/OAuth to Entra—avoid duplicate identity silos.
Architecture choices
- Vendor app in Entra for SAML SSO.
- Conditional Access applied if VPN integration supports modern auth.
Hardening
Block split tunnel risky categories if data exfiltration concern.
Lifecycle
Certificate/SAML cert expiry tracking; test after tenant branding changes.
Docs
Per-site VPN profiles and MFA dependencies in DR binder.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...