GitHub CoPilot for Beginners

Are you new to GitHub Copilot? I recommend watching this video, which provides a comprehensive guide from setup to coding examples. The video demonstrates how the AI assistant integrates with various IDEs, such as VS Code, and includes an example of a Python email validator. For sure it will improve your coding experience, and you will enjoy it!!

Microsoft Ignite 2024 – Security Sessions

You can hear the great announcements from the Microsoft Ignite 2024. You can try the Microsoft Ignite 2024 session scheduler is now live for adding sessions to your own personal calendar, whether you’ve grabbed a ticket to attend in person, you’ll watch online, or you’re building a vault to watch at your leisure.

Being a Security person, i loved the following Security related sessions (Labs, Breakout):

LAB462-R1 (Chicago only) – Boost security and IT efficiency with Microsoft Security Copilot

THR653 (Chicago only) – Mastering custom plugins in Microsoft Security Copilot

BRK309 – Innovating security operations with Microsoft Sentinel

BRK310 – Simplify your SOC with the unified security operations platform

BRK312 – Break down risk siloes and build up code to cloud security posture

BRK316 – One goal, many roles: Microsoft Security Copilot use cases for all

BRK307 – Transform your security with GenAI innovations in Security Copilot

BRK319 – Simpler, smarter and more secure endpoint management with Intune

BRK320 – Enhance IT expertise and efficiency with Copilot in Microsoft Intune

BRK328 – Making Zero Trust Real: Top 10 Security Controls you can implement now
BRK329 – Scott and Mark learn responsible AI

Please make use of it. Happy Security!!

Microsoft Entra API-driven inbound user provisioning

Now with API-driven inbound provisioning, the Microsoft Entra provisioning service now supports integration with any system of record. Customers and partners can use any automation tool of their choice to retrieve workforce data from the system of record and ingest it into Microsoft Entra ID.

The IT admin has full control on how the data is processed and transformed with attribute mappings. Once the workforce data is available in Microsoft Entra ID, the IT admin can configure appropriate joiner-mover-leaver business processes using Lifecycle Workflows.

For more information, refer: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/inbound-provisioning-api-concepts

[General Availability] Microsoft Graph Rich Notifications

Microsoft Graph allows apps to subscribe to and receive change notifications for resources through different delivery channels. You can set up subscriptions to include the changed resource data (such as the content of a Microsoft Teams chat message or Microsoft Teams presence information) in change notifications. Change notifications that include the resource change data are called Rich Notifications. Your app can use rich notifications to run your business logic without having to make a separate API call to fetch the changed resource.

Getting Started with Microsoft Graph and Change notification

For more information, you can refer this article which will guide you through the process for setting up rich notifications in your application.

ADAL/MSAL Migration: Azure AD Recommendation

Are you a developer/customer who has applications which uses/references legacy Microsoft ADAL (Azure AD Authentication Library)? If yes, then this post is for you.

Microsoft recommend customers migrate to MSAL, which is designed to enable a secure solution without developers having to worry about the implementation details. MSAL simplifies and manages acquiring, managing, caching, and refreshing tokens, and uses best practices for resilience. As you aware the final deadline to migrate your applications to MSAL has been extended to June 30, 2023. 

To help further, you can try the new Azure Active Directory (Azure AD) recommendation. which will help you to migrate from ADAL to MSAL will enable customers to easily find and migrate apps using ADAL in their tenant to MSAL.  So that you can migrate apps using the legacy ADAL to the Microsoft Authentication Library (MSAL). It’s part of Microsoft’s ongoing initiative to improve the developer experience, service reliability, and security of customer applications to end support for ADAL.

For the more information you can refer, Azure AD recommendations for more details.  
 

Let’s play with Microsoft Graph Developer Proxy

As we’re aware Microsoft Graph exposes hundreds of endpoints that allow you to tap into data and insights in Microsoft 365. To use these API endpoints, you need to request a correct set of permissions. As a developer if you work on a large solution that uses many endpoints, it can be difficult to build the exact list of minimal permissions for your application. In this scenario, you can try the Microsoft Graph Developer Proxy which allows developers to verify that their application, that uses Microsoft Graph, correctly handles errors that can happen when the application is used at scale.

With Microsoft Graph Developer Proxy, you can:

• Simulate Microsoft Graph API errors, to verify that your application handles them gracefully when deployed at scale,
• Mock Microsoft Graph API responses, to use your application with test data
• The preview ability to detect minimal permissions for calling Microsoft Graph APIs, improved simulation of throttling, and caching guidance.

For more information, you can Download Microsoft Graph Developer Proxy v0.8 and check if your apps properly handle API errors.

With this version, you can try the preview of a new feature that shows the list of minimal Microsoft Graph API permissions for your app. Just start the proxy, put it in recording mode and let your app run and call Microsoft Graph APIs. After you stop recording, Developer Proxy will determine the list of minimal permissions based on the requests that it intercepted.

[Generally Available] Microsoft Graph Go SDK

Are you a Go Programmer? Then this is for you. We have the Microsoft Graph Go SDK, is a client library that lets you connect and retrieve data from any of the supported Microsoft services that are available on Microsoft Graph API and provide to users many features that will increase resiliency, better performance, ease authentication and more.

The client library is generated using Kiota, a new code generator that is now generally available and enables us to provide a consistent and fluent API across different platforms.

In addition, with the Microsoft Graph Go SDK, you can perform multiple tasks with one batch request. A batch request lets you combine multiple requests into one, which can improve the performance and efficiency of your application by reducing the number of network round trips.

Hence as a fellow developer I encourage you to try out the new version and share  your feedback on GitHub! For questions about the Microsoft Graph API, go to Microsoft Q&A, community forum too.

meet Microsoft365 COPilot, the enterprise ready AI

I wish you to experience the power of next-generation AI with Microsoft 365 Copilot —  for work. It combines the power of large language models (LLMs) with your data in the Microsoft Graph and the Microsoft 365 apps to turn your words into the most powerful productivity tool on the planet.

How its integrated? Microsoft 365 Copilot is integrated into in two ways. It works alongside you, embedded in the Microsoft 365 apps you use every day — Word, Excel, PowerPoint, Outlook, Teams and more — to unleash creativity, unlock productivity and uplevel skills.

Must try: Also you may want to try the, Business Chat. It works across the AI, Microsoft 365 apps, and your data — calendar, emails, chats, documents, meetings and contacts — to do things you’ve never been able to do before.

How it works? You can use the simple English phrases  like “Tell my team how we updated the product strategy,” and it will generate a status update based on the morning’s meetings, emails and chat threads.

With Copilot, you’re always in control. You decide what to keep, modify or discard. Now, you can be more creative in Word, more analytical in Excel, more expressive in PowerPoint, more productive in Outlook and more collaborative in Teams.

For more information, you can refer: Introducing Microsoft 365 Copilot – your COPilot for work – The Official Microsoft Blog and visit https://aka.ms/WorkLabAI too!!

try public preview – microsoft identity Conditional access filters for apps

As part of Zero trust posture, protecting all apps is key. At present, policies explicitly list apps. Today Microsoft announced the public preview of filters for apps. This provides a new way to manage Conditional Access (CA) assignment for apps and workload identities at scale.

With filters for apps, admins can tag applications with custom security attributes and apply Conditional Access policies based on those tags, rather than individually selecting apps. With this approach there is no limit on the number of apps covered, and new apps you add with the attributes are automatically included in the policies! Also, Filters for apps use the same expressions as Conditional Access filters for devices, providing a rich and familiar experience.

So go ahead, try the public preview feature & you can see how easily you can secure access to more of your apps. If there is feedback, share the same as updated in the documentation.

Related documents to refer:

Conditional Access Filters for Apps

What are custom security attributes in Azure AD? (Preview) – Azure Active Directory – Microsoft Entr…

Filter for devices as a condition in Conditional Access policy – Azure Active Directory – Microsoft …

Azure Active Directory Conditional Access for workload identities preview – Microsoft Entra | Micros…

Learn Microsoft Graph via Game

Hey developers!!

I found this interesting 30 Days of Microsoft Graph series.

It’s a gamified learning experience for beginners to challenge themselves to build apps with Microsoft Graph and JavaScript based on the top Microsoft Graph scenarios.

Go and get started!!

Microsoft IGNITE 2022 – Developer Sessions

Microsoft Ignite 202 kicked started and we’re in middle of it. You can register it here, in case if you haven’t did it.

If you’re a Microsoft developer (Microsoft Graph), then these  i would suggest you to check the following sessions:

Session Date/Time	Session Details	Presenters
Thursday, October 13 10:30 PM – 11:30 PM India Standard Time	One Microsoft: Microsoft Graph and its role within the Microsoft Cloud ecosystem	Sébastien Levert, Darrel Miller, Rabeb Othmani
Thursday, October 13 10:30 PM – 11:30 PM India Standard Time	Add chat and calling capabilities into any application	Tomas Chladek, Nick Kramer
Thursday, October 13 10:30 PM – 11:30 PM India Standard Time	Improving your DevOps/PowerShell experience with Azure AD	Adam Edwards, Ian Farr, Merill Fernando
Thursday, October 13 11:30 PM – 12:30 AM India Standard Time	Driving business analytics with Microsoft 365 data	Nik Charlebois, Chantrelle Nielsen
Friday, October 14 3:30 AM – 4:15 AM India Standard Time	Securing Microsoft Teams: Automate provisioning and secure highly governed, scalable, targeted guest access	Todd Furst, Michael Mukalian

Happy Learning!!

SCIM Developer: Validate your Azure AD SCIM endpoint using SCIM Validator Tool

If you’re a SCIM developer then this is intended for you. In this we will see how you can use the Azure AD SCIM Validator to validate that your provisioning server is compatible with the Azure SCIM client.

To get started, make sure you have,

• Valid Azure Subscription
• SCIM endpoint

Step 1: Let’s validate the SCIM Endpoint.

a. Let’s navigate to https://scimvalidator.microsoft.com/

b. Select one of the three options:

Step 2: Let’s configure the testing method

Step 3: Let’s validate your SCIM endpoint.

a. Select Test Schema to begin the test.
b. Review the results with a summary of passed and failed tests.
c. Select the show details tab and review and fix issues.
d. Continue to test your schema until all tests pass.

Now you learnt how you can utilize the tool and validate further. Good job!!

Note:
– For more detailed step-by-step information, please refer the documentation.
– In case if you created any Azure resources part of your testing & no longer needed, then make sue to delete them.