Jonas Markström – Medium

Jonas Markström

Pinned

Jonas Markström

FIDO2 security key sign-in with Entra ID (Azure AD) in five simple steps

In this guide I will take you through the most basic but also the latest and greatest Microsoft Entra features in order to support security…

13 min readDec 9, 2022

--

1

FIDO2 security key sign-in with Entra ID (Azure AD) in five simple steps

--

1

Jonas Markström

Forcing PIN change on first use with FIDO2 security keys

The ability to expire a security key PIN upon initial use is poised to become one of the more impactful features of FIDO (CTAP) 2.1…

5 min read6 days ago

--

Forcing PIN change on first use with FIDO2 security keys

--

Jonas Markström

Step-up authentication with Security Keys and Microsoft Privilege Identity Management (PIM)

In the evolving IT landscape that marries cloud computing with cybersecurity threats, CISO’s and others tasked with safeguarding company…

7 min readMar 14, 2024

--

Step-up authentication with Security Keys and Microsoft Privilege Identity Management (PIM)

--

Jonas Markström

Implementing a FIDO2 Terms of Use (ToU) for Microsoft Entra

Displaying a Terms of Use (ToU) document when accessing company resources offers an opportunity to inform and guide users on specific…

5 min readNov 24, 2023

--

Implementing a FIDO2 Terms of Use (ToU) for Microsoft Entra

--

Jonas Markström

The case for hardware-based MFA for Microsoft Entra ‘break glass’ accounts

If you were to explain to someone that organizations commonly deploy multi-factor authentication (MFA) for their regular users but…

9 min readOct 27, 2023

--

The case for hardware-based MFA for Microsoft Entra ‘break glass’ accounts

--

Jonas Markström

The complete guide to SSH with FIDO2 security keys

If you’re using SSH for remote access, Multi-Factor Authentication (MFA) is a must-have security measure. In the event that you have not…

12 min readOct 14, 2023

--

3

The complete guide to SSH with FIDO2 security keys

--

3

Jonas Markström

Scripting YubiKey PIV configuration and enrollment with Python

Do you need certificates for a limited use case or are you just curious about how much YubiKey configuration can be done with scripting? In…

6 min readSep 7, 2023

--

Scripting YubiKey PIV configuration and enrollment with Python

--

Jonas Markström

Identity proofing FIDO2 enrollments

In this new era defined by hybrid and remote work dynamics, intertwined with the rise of AI and deepfake technology, the necessity of…

7 min readSep 4, 2023

--

Identity proofing FIDO2 enrollments

--

Jonas Markström

Protecting Git access and code commits with the YubiKey

In today’s knowledge-based economy a company’s trajectory rests on the strategies embraced by its Engineering department. One fundamental…

11 min readAug 28, 2023

--

Protecting Git access and code commits with the YubiKey

--

Jonas Markström

Enforcing FIDO security key ‘make and model’ with AAGUIDs in the Keycloak IdP

Even when adhering or certifying to the same standard, not all authenticators are equal in terms of user experience, assurance, or their…

5 min readJun 2, 2023

--

1

Enforcing FIDO security key ‘make and model’ with AAGUIDs in the Keycloak IdP

--

1

Jonas Markström

Jonas Markström

I am a certified security professional with expertise in authentication, encryption and fine-grained access control. All opinions expressed here are my own.

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams