Security tip: Block user consent to apps in Azure AD and route all app consent requests through admin approval. This stops OAuth phishing cold.

#AppConsent #AzureAD #M365Security
https://365securityassessment.com

Did you know? App consent phishing is surging. Users grant OAuth permissions to malicious apps that then access their M365 data. Restrict app consent in Azure AD.

#OAuthPhishing #AppConsent #M365Security
https://365securityassessment.com

Microsoft-managed default app consent policy now blocks 20 additional permissions Microsoft has expanded the Microsoft-managed default app consent policy in Entra ID to block 20 additional permissions, including access to Outlook Mail, Outlook Calendar, and Teams data

Microsoft expanded the Microsoft-managed app consent policy to block 20 additional permissions, including access to Outlook Mail, Outlook Calendar and Teams data. #EntraID #AppConsent #Security

Configuring a custom app consent policy in Entra ID using Microsoft Graph In this post, I walk you through how to create and customize a custom app consent policy in Entra ID using the Microsoft Graph API.

Entra ID soon blocks user consent for apps accessing files/sites, requiring explicit approval. You can build a custom App Consent Policy to allow safe scopes and block risky ones. #EntraID #AppConsent #MicrosoftGraph