Microsoft Cloud App Security

Deploy Microsoft Cloud App Security

Every Day more and more business activity takes place in the cloud and even if your company doesn’t use cloud base solutions. You implement properly did.

Legacy security solution simply designs to manage. So how can you maintain Visibility, Control, and Protection of your company data?

So, the answer is simple ……….

Microsoft Cloud App Security takes the concept of visibility, control and protection.

Microsoft Cloud App Security can help you take advantage of the benefits of cloud application while maintaining control of your corporate resources.

It works by improving visibility of cloud activity, and helping to increase the protection of corporate data.

Firstly Organization must have a license to use Cloud App Security.  You do not need an Office 365 license to use Cloud App Security.

To access the portal

Go to, https://portal.cloudappsecurity.com

Alternatively you can access the portal through the office 365 Admin Center by clicking the Admin Center icon followed by Cloud App Security.

Getting Started

Step1. Set up Cloud Discovery

Require task: Upload traffic logs To Create a continuous Cloud Discovery report

-      From the settings cog, select Cloud Discovery Settings

           -      Choose Automatic log upload

           -      On the Data sources tab, add your sources

           -      On the Log collector tab, configure the log collector

    To create a snapshot Cloud Discovery report

           -      Go to Discover > Snapshot report and follow the steps shown.

Why should you configure Cloud Discovery reports?

Having visibility into shadow IT in your organization is critical. After logs are analyzed, you can easily discover which cloud apps are being used, by which people, and on which devices.

Step2.  Set instant visibility, protection, and governance actions for your apps

Require task: Connect apps

          -      From the setting cog, select App connectors

          -      Click the plus sign to add an app and select an app

          -      Follow the configuration steps to connect the app

Why connect an app?

After you connect app, you can gain deeper visibility so you can investigate activities, files and accounts for the apps in your cloud environment.

Step3. Control cloud apps with policies

Require task: Create Policies

       -      Go to Control > Templates

       -      Select a policy template from the list, and then Choose plus sign Create Policy

       -      Customize the policy (select filters, actions, and other settings), and then choose                 Create.

       -      On the Policies tab, choose the policy to see the relevant matches, (activities, files,             alerts). To cover all your cloud environment security scenarios, create a policy for               each risk category.

How can policies help your organization?

You can use policies to help you monitor trends, see security threats, and generate customized reports and alerts. With policies you can create governance actions, and set data loss prevention and file-sharing controls.

Thanks For Learning
SOE THWIN OO

Single Sign-On with Azure Active Directory

Single Sign-on with Azure Active Directory?

Single sign-on means being able to access all of the applications and resources that you need to do business, by signing in only once using a single user account.

Nowadays organizations rely upon software as service (SaaS) applications such as Office 365, Box, etc… IT staff needs to individually create and update user accounts in each SaaS application, and user have to remember a password for each SaaS application.

Azure Active Directory extends on-premises Active Directory into the cloud, enabling users to use their primary organizational account to not only sign in to their domain-joined devices and company resources, but also all of the web and SaaS applications needed for their job.

Azure AD enables easy integration to many of today’s popular SaaS applications. It provides identity and access management, and enables user to single sign-on to applications directly, or discover and launch them from a portal such as Office 365 or the Azure AD access panel.

Azure AD supports three different ways to sign in to applications:

  §  Federated single sign-on

  §  Password-based single sign-on

  §  Linked single sign-on

  

     Federated single sign-on

Users in your organization to be automatically signed in to a third-party SaaS application by Azure AD using the user account information from Azure AD.

Password-based single sign-on

Users in your organization to be automatically signed in to a third-party SaaS application by Azure AD using the user account information from the third-party SaaS application. When you enable this feature, Azure AD collects and securely stores the user account information and the related password.

Linked single sign-on

This option simply allows the administrator to create a link to an application, and place it on the access panel for selected users. E.g. if there is an application that is configured to authenticate users using Active Directory Federation Services and administrator can use the “Linked Single Sign-On” option to create a link to it on the access panel. When user access the link, they are authenticated using Active Directory Federation Service, or whatever existing single sign-on solution is provide by the application.

Azure AD Application Gallery

Provides a listing of application that are known to support a form of single sign-on with Azure Active Directory.

Adding an unlisted application

Sing in to Azure Portal using your Azure Active Directory administrator account. Browse to the Azure Active Directory > Enterprise Applications > New application > Non-gallery application > Select Application > Add > Configure a Single Sign-On > Choose Sign-On option.

Thanks for Learning 

SOE THWIN OO