Windows 10: Scalable IAL3 Compliant Solution For Enterprise Identity Security

Oughtaisay · Feb 4, 2026 at 6:32 AM

NIST's digital identity guidelines define IAL3 as its highest level of rigor for digital identity verification sessions, document validation against authoritative sources, and biometric comparison of claimed digital identities to reduce impersonation and fraud.

TrustSwiftly helps organizations meet IAL3 standards and FedRAMP high compliance with its HYPR Affirm passwordless authentication and IAL3 compliant solution, strengthening authentication journey with chat, video, facial recognition...

Read more

qubit · Feb 4, 2026 at 6:34 AM

Corporate Security Solution

It wasn't until I told them how many millions they would lose by keeping all the art work on a USB drive with no offsite backup did they invest in a damn tape drive. Baby steps.
Click to expand...

That made me so facepalm. Some people have absolutely no clue. I hope they don't take you for granted with all this you're doing for them.

SonicWall is a good security product, so Mindweaver's suggestion sounds like a good one and should make for a rather bigger baby step. Let's hope they take it.

Brink · Feb 4, 2026 at 6:34 AM

Microsoft Progress Report: Enterprise security

Last November Microsoft CEO Satya Nadella highlighted the need for a new approach to enterprise security and outlined some of the investments we’re making. This new approach empowers our customers to accelerate their adoption of a protect, detect, respond security posture.

Keeping our network safe, while protecting our data and our customers’ data, is paramount. As Chief Information Security Officer at Microsoft, I am constantly looking for ways to improve our security posture, through new technologies that accelerate our ability to protect, detect and respond to cyber incidents.

Protecting Microsoft’s environment entails managing security for more than 1 million corporate devices across the globe, using multiple platforms. The diversity of our computing environment often mirrors those of our customers, which enables us to develop services that meet their security needs. My team is often the first customer of our company’s technologies, and we work hard to ensure that the products are customer-ready before they go to market.

As attackers get more sophisticated, we need to evolve our ability to get real-time insights and predictive intelligence across our network so we can stay a step ahead of the threats. We must be able to correlate our security data with our threat intelligence data to know good from bad. And we must leverage the industry and our partners to ensure a broad, comprehensive approach. These three things align with the approach Microsoft brings to security for our customers – a holistic, agile security platform, informed by insights from our intelligent security graph and integration with partners and the industry. In the 100 days since Satya discussed our newly invigorated approach to security, we’ve made some significant progress, which I’d like to share with you today.

Secure Platform

We’ve made a number of enhancements to our platform to help IT enable rapid innovations while protecting corporate data and assets.

Microsoft Cloud App Security general availability
In September Microsoft made a significant security investment when we acquired Adallom, the leading cloud access security broker (CASB), for protecting customer data inside SaaS applications. Since the acquisition we have been working hard to integrate the expertise and technology that Adallom brought with it into the cloud security capabilities we have in Microsoft Azure and Office 365.

Today, we are announcing Microsoft Cloud App Security, based on the Adallom technology, will become generally available in April 2016. Microsoft Cloud App Security brings the same level of visibility and control that IT departments have in their on-premises network to their SaaS applications including apps like Box, SalesForce, ServiceNow, Ariba, and of course Office 365.

For more information, read the Active Directory Team blog.

New security enhancements coming to Office 365
Microsoft Cloud App Security will also power new advanced security management capabilities built into Office 365 that will improve IT visibility and control. These new capabilities include:

Advanced security alerts, which notify Office 365 admins of anomalous or suspicious activity in the service so that they can take action.

Cloud app discovery, which enables IT to analyze which cloud services their users are connecting to.

App permissions, which provides the ability to approve or revoke permissions for third party services that your users are authorized to connect to Office 365.

Read today’s Office blog for more information on these new Office 365 security capabilities.

Customer Lockbox for SharePoint Online and OneDrive for Business begins rolling out in early Q2
In the very rare instances when a Microsoft engineer must request access to the Office 365 service, such as when troubleshooting a customer issue with a mailbox or document contents, they need to go through multiple levels of approval within Microsoft. In December, we announced general availability of Customer Lockbox for Exchange Online, which integrates the customer into the approval process.

Today, we are announcing that Customer Lockbox for SharePoint Online and OneDrive for Business will begin rolling out in early Q2 of this year. By extending Customer Lockbox to additional Office 365 services, we’re providing customers new approval rights, greater transparency and enhanced control over their data in Office 365.

For more information on Customer Lockbox for SharePoint and OneDrive for Business, please read this article on the Office blog.

More security management and reporting options in Azure Security Center
Customers have the ability to configure security policies for each of their Azure subscriptions. Within a subscription, organizations could be running workloads that have different security requirements. To accommodate this, now in addition to configuring a Security Policy at the subscription level, customers will also have the option to configure a Security Policy for a Resource Group – enabling them to tailor the policy based on the security needs of specific workloads.

A new Power BI Dashboard enables customers to visualize, analyze, and filter recommendations and security alerts from anywhere, including a mobile device. Customers can use the Power BI dashboard to reveal trends and attack patterns.

The Azure blog has more information on the importance of this new, enhanced capability.

Extending Security and Auditing in Microsoft Operations Management Suite (OMS)
A revamped Security and Audit dashboard will provide greater line of sight into security-related events across customer datacenters. This includes information about authentication and access control events, network activity, malware protections, and system updates.

You can find more information on these new Microsoft Operations Management Suite enhancements in this article on the Hybrid Management blog.

Intelligent Security Graph
As customers evolve their security strategies from a simple “protect and recover” model, to a more holistic protect, detect, respond posture, intelligence becomes central. In November we shared how we use unique insights from our intelligent security graph, formed by trillions of signals from billions of sources, to better detect attacks, accelerate our response and better protect our customers and partners from modern day threats.

New products we are rolling out today will improve our security signal, help us protect you and help you protect yourself.

Azure Active Directory Identity Protection in public preview
A great example of a new Microsoft security investment in this area is Azure Active Directory Identity Protection. Azure Active Directory security capabilities are built on Microsoft’s experience protecting consumer identities, and gains tremendous accuracy by analyzing the signal from over 14 billion logins to help identify 300,000 potentially compromised user authentications per a day. Azure Active Directory Identity Protection builds on these results and detects suspicious activities for end users and privileged identities based on signals like brute force attacks, leaked credentials, sign ins from unfamiliar locations and infected devices. Based on these suspicious activities, a user risk severity is calculated and risk-based policies can be configured allowing the service to automatically protect the identities of your organization from future threats. We are announcing that Azure Active Directory Identity Protection will be available for public preview next week.

For more information on Azure Active Directory Identity Protection please read this article on the Active Directory Team blog.

Azure Security Center Advanced Threat Detection
After years of examining crash dumps that our customers opted to send to Microsoft from more than a billion PCs worldwide, Microsoft has developed the capability to analyze this data to effectively detect compromised systems because crashes are often the result of failed exploitation attempts and brittle malware.

These capabilities have been integrated into Azure Security Center, which offers advanced threat detection for customers hosting virtual machines in Microsoft Azure. Now Azure Security Center automatically collects crash events from Azure virtual machines, analyzes the data, and alerts the customer when it has detected that one of their virtual machines is likely compromised. Similarly, additional network and behavioral analytics have also been integrated into Azure Security Center as we continue to evolve these capabilities to detect and mitigate an even wider array of threats and provide actionable intelligence to our customers.

You can find more information on these new Azure Security Center capabilities in this article on the Azure blog.

New Threat Visualization in OMS
Operations Management Suite taps into Microsoft global threat intelligence to alert you when firewall logs, Wire Data, or IIS logs indicate that one of your servers is communicating with a malicious IP address. By charting the source of these attacks on an interactive map, customers will now be able to visualize attack patterns and drill in to learn more.

You can find more information on these new Microsoft Operations Management Suite enhancements in this article on the Hybrid Management blog.

Working with Partners

No single company can solve the security challenges that our customers face today, which is why the security ecosystem, and all of our security partners, are key to our approach. Today we are announcing new Azure Security Center partner solutions that make it easier than ever for customers to bring their trusted security solutions with them to the cloud.

Expanded Azure Security Center partner offerings
We are announcing that in the next few weeks, Azure Security Center will discover deployments for which a Next Generation Firewall is recommended, and enable customers to provision Check Point vSEC in just a few clicks. Next Generation Firewall solutions from Cisco and Fortinet will follow, as will Web Application Firewall solutions Imperva SecureSphere and Imperva Incapsula. Alerts from these partner solutions will also be integrated in Security Center so customers can view and respond to security issues affecting their Azure resources in one place.

For more information on these new Azure Security Center partner offerings please see this article on the Azure blog.

Our customers can get started using the technology we announced today to better protect themselves from current and emerging threats. At next week’s RSA Conference 2016 we’ll share more about our approach and our commitment to provide the platform, intelligence and partners that will help protect our customers now and into the future.

Bret Arsenault
Click to expand...

Source: Progress Report: Enterprise security for our mobile-first, cloud-first world - The Official Microsoft Blog

Brink · Feb 4, 2026 at 6:34 AM

New capabilities coming to Microsoft Enterprise Mobility + Security

As 2016 draws to a close, we would like to thank you for choosing Microsoft Enterprise Mobility + Security (EMS) to protect and secure your employees as you continue to digitally transform your organizations. More than 37,000 customers and over half of the Fortune 500 have now chosen EMS.

With EMS we continue to build on identity at the core of the solution to maximize your employees’ productivity while at the same time providing the necessary capabilities across security, management of devices and apps, and information protection to ensure that your critical company data is protected. Today we are expanding these capabilities even further with:

Pass-through authentication with Azure Active Directory, available today in preview, enables secure single sign-on to cloud resources without requiring syncing of passwords to the cloud, or modification to existing on-premises network infrastructure.

Microsoft Intune’s new Admin Console in Azure, rolling out in preview, makes setting up integrated security and management scenarios across EMS services even easier.

Azure Information Protection updates that provide even greater flexibility and security for protecting data at the file level. These updates include support for more file types, integration with your on-premises encryption key network, and new options for creating classification and protection policies.

Here’s more on these new capabilities and how our customers will benefit from these innovations:

Pass-through authentication with Azure Active Directory

Pass-through authentication now in preview, lets users securely login to cloud resources by validating their password against their on-premises Active Directory more easily than ever. This feature allows customers that cannot or do not want to store passwords in the cloud (even encrypted ones) to onboard Azure Active Directory and Office 365 without having to modify their corporate network infrastructure and install products such as Active Directory Federation Services (AD FS) or similar third party federation solutions. Pass-through authentication is set up via the Azure AD Connect admin experience as the second option for authentication along with Password Sync and AD FS.

Additionally, with this new update, both “Pass-through authentication” and “Password Synchronization” authentication options will now provide seamless single sign-on to Azure AD connected applications from Windows devices.

Preview of Microsoft Intune Admin Console in Azure

The new Intune admin experience on Azure begins rolling out in public preview for new and test tenants. The new console, built in Azure, provides powerful and integrated management of core EMS security solutions, such as conditional access to corporate resources based on device, users or risk, allowing for set up and management of policies between Intune and Azure Active Directory. This new admin experience makes it easier than ever to protect tens of thousands of mobile devices.

Azure Information Protection updates

Protecting data at the file level throughout its lifecycle, from creation to sharing to tracking and revocation, regardless of where it is stored or accessed, is a key priority for our customers and a unique part of the EMS solution. Since the release of Azure Information Protection in October we have been listening to customer feedback and are releasing several new capabilities. Below are a few of the highlights:

Give end users more focused classification and protection options with policies based on group membership.

Support for more non-Office file types and bulk labelling of data at rest.

Integrate protection with on-premises keys with Hold Your Own Key (HYOK).

Enterprise Mobility + Security Customer Stories

As more and more customers are choosing EMS, we wanted to share with you some examples of recent customers who have been deploying and using it successfully:

Whole Foods is embracing identity-driven security with EMS to protect applications

Avanade balances data security and employee privacy with EMS

Get started with your own Enterprise Mobility + Security deployment.
Click to expand...

Source: New capabilities coming to Microsoft Enterprise Mobility + Security (EMS) Enterprise Mobility and Security Blog

Windows 10: Scalable IAL3 Compliant Solution For Enterprise Identity Security

Scalable IAL3 Compliant Solution For Enterprise Identity Security

Scalable IAL3 Compliant Solution For Enterprise Identity Security

Scalable IAL3 Compliant Solution For Enterprise Identity Security

Scalable IAL3 Compliant Solution For Enterprise Identity Security - Similar Threads - Scalable IAL3 Compliant

solution to security at glance problem

solution to security at glance problem

solution to security at glance problem

Security NOT just an Enterprise thing

Identity Theft, Security on my Windows 10 PC

Window Enterprise Security

Looking for enterprise software solutions for Windows 10?

Windows 10: Security and Identity Protection for the...

Windows 10: Security and Identity Protection for Today