Having all your enterprise apps plugged into Entra ID SSO is certainly a goal for most organisations but it's not easily achieved. Many applications charge extra for SSO functionality or restrict it to the most expensive plans. Some applications may not even offer SSO as an option, older applications in particular. Enter Password-based SSO, old technology that we might have forgotten about. It's a password vaulting solution where Entra stores your password for you. "But passwords are insecure." I hear you say and you might be right. This pragmatic approach tries to use tech we are already paying for, to better secure your app. If you don't have the access to other forms of SSO then this might be something to consider. What does it get you? Long random passwords are the best option, but end users don't like them because we ask them to manage the password themselves. This means users end up reusing passwords or use short and easily remembered pass...
In simple terms DMARC is email protection. It is the next evolution in technologies that have been layered on top of the basic SMTP email protocol in an effort to improve email security. It stops attackers sending email from your domain. Commonly called domain spoofing. Fixing SMTP just isn’t possible. Email is so prevalent that getting everyone to switch to something new would be almost impossible. Layering on top of SMTP allows for the gradual adoption of new technologies without breaking old ones. Let’s explore why you should care about DMARC. DMARC is made up of 3 technologies: Sender Policy Framework SPF is a DNS record that you create, that tells the world these are the places my domain sends email from. This should include your mail server but also your website if it uses contact forms, bulk email platforms like Sendgrid and any other web applications that send email using your domain. SPF provides a method for indicating to mail servers checking your DNS records how...