All work

Policy 05Financial advisory & asset managementSecurity & Compliance

OAuth application and cross-tenant access governance

Policy path. Signal: A user or partner requests access for an app or tenant. Decision: Admin consent policy and cross-tenant settings. Controls: Require Admin consent for third-party apps; Block Unauthorised and dormant integrations; Action Partner access scoped. Outcome: Application consent under administrative governance.

If The challenge

Third-party integrations, external application permissions, partner access boundaries and audit visibility required central oversight.

Then The solution

Reviewed application integrations, established administrative consent governance, removed unauthorised or dormant integrations identified during the engagement, and tightened cross-tenant access settings.

Result Outcomes

  • Brought application consent under administrative governance
  • Revoked unauthorised integrations identified during review
  • Scoped external partner access and improved audit visibility

Related evidence

All work

Policy 01Software development & IT services

Enterprise identity security and Conditional Access

If
Engineering teams accessed corporate resources from unmanaged endpoints, legacy authentication remained available, and…
Then
Redesigned Conditional Access, planned and implemented a staged retirement of legacy authentication, strengthened MFA…
Result
Reduced unmanaged endpoint exposure
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • Device compliance

Policy 02Multi-location professional services

Identity protection and email domain security

If
MFA enforcement and privileged access required improvement, while email authentication records needed strengthening…
Then
Implemented staged Conditional Access improvements, addressed legacy authentication dependencies, and strengthened…
Result
Standardised MFA enforcement and privileged-access boundaries
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • SPF

Policy 03Healthcare & diagnostics

Secure access for shared clinical and laboratory workstations

If
Shared workstations used across shifts in clinical and laboratory settings created challenges for sensitive application…
Then
Designed Conditional Access for shared-device scenarios, including session restrictions, reauthentication for sensitive…
Result
Strengthened access restrictions for shared endpoints
  • Conditional Access
  • Microsoft Entra ID
  • MFA
  • Session controls

Contact

Let's talk about secure Microsoft cloud work.

↑↓ to move · Enter to open · Esc to close