{"id":8832,"date":"2023-05-23T06:51:13","date_gmt":"2023-05-23T13:51:13","guid":{"rendered":"https:\/\/www.microsoft.com\/insidetrack\/blog\/?p=8832"},"modified":"2023-06-29T11:31:36","modified_gmt":"2023-06-29T18:31:36","slug":"verifying-identity-in-a-zero-trust-model","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/","title":{"rendered":"Verifying identity in a Zero Trust model internally at Microsoft"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"112\" class=\"size-medium wp-image-7498 alignright\" style=\"margin-top: 0px;\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/ms-digital-technical-stories-300x112.png\" alt=\"Microsoft Digital technical stories\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/ms-digital-technical-stories-300x112.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/ms-digital-technical-stories.png 500w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/>Identity-driven security is a core pillar of our Zero Trust model.<\/p>\n<p>Identities define the Zero Trust security boundary, and we use identity as the primary factor in how we allow access to corporate resources. When an identity tries to access any resource, we verify that identity with strong authentication, and we ensure that access is compliant and follows the access patterns typical for that identity. We also confirm that the identity follows least-privilege access principles.<\/p>\n<p>With these processes in place, verified identity contributes to the broader framework for Zero Trust, alongside the other pillars of verified devices, verified access, and verified services.<\/p>\n<p>&nbsp;<\/p>\n<figure id=\"attachment_8835\" aria-describedby=\"caption-attachment-8835\" style=\"width: 828px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-8835 size-full\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193-img-001.png\" alt=\"The four pillars of the Zero Trust model: verify identity, verify device, verify access, and verify services\" width=\"828\" height=\"564\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193-img-001.png 828w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193-img-001-300x204.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193-img-001-768x523.png 768w\" sizes=\"(max-width: 828px) 100vw, 828px\" \/><figcaption id=\"caption-attachment-8835\" class=\"wp-caption-text\">The four pillars of the Zero Trust model.<\/figcaption><\/figure>\n<p><em>[<a href=\"https:\/\/www.microsoft.com\/en-us\/insidetrack\/verifying-devices-in-a-zero-trust-model\">Check out verifying devices in a Zero Trust model<\/a>. | <a href=\"https:\/\/www.microsoft.com\/en-us\/insidetrack\/implementing-a-zero-trust-security-model-at-microsoft\">Read more about implementing a Zero Trust security model at Microsoft<\/a>.<\/em><em>]<\/em><\/p>\n<h2>Unifying the identity environment<\/h2>\n<p>A unified identity environment is crucial to verified identity in our Zero Trust model. To enable a single user identity for authentication and offer a unified experience, we integrated on-premises Windows Server Active Directory forests with Microsoft Azure Active Directory (Azure AD). Azure AD provides a centralized, cloud-based identity directory on which all our identity-related processes depend. We use Azure AD Connect and Microsoft Azure Active Directory Federation Services (AD FS) to unify identity data within Azure AD so that Microsoft Azure\u2013based applications can confirm the individual user attributes that make up an identity\u2014location, organization, or job title, for example.<\/p>\n<p>Every employee or partner who needs access to corporate resources is assigned an identity that is synchronized to Microsoft Azure AD and gives the user access to corporate resources, Microsoft Office 365, Microsoft software as a service (SaaS) applications, and third-party SaaS and platform as a service (PaaS) applications.<\/p>\n<p>A key part of our business is working closely with partner companies. To enable more seamless collaboration with our partners, we&#8217;re pioneering a new multifactor authentication feature to mitigate multiple credential prompts that some users experienced. Previously, external users who had already authenticated with a second factor in their home tenant were prompted again for a different two-factor authentication to access internal Microsoft resources. Now, if our external partner has already signed in to their home tenant using multifactor authentication, they won\u2019t encounter a separate multifactor authentication prompt when accessing our Microsoft resources.<\/p>\n<h2>Goals for verifying identity in Zero Trust<\/h2>\n<p>Our internal security team and the Microsoft Digital Employee Experience team\u2019s approach to verified identity is rooted in three primary goals specifically related to human-based identities as they\u2019re stored in our unified identity environment:<\/p>\n<ul class=\"c-list\">\n<li>Ensure that strong identity is verified and enforced.<\/li>\n<li>Eliminate password-focused authentication in favor of biometrics.<\/li>\n<li>Limit access to resources based on job function by using least-privilege access principles.<\/li>\n<\/ul>\n<h2>Enforcing strong identity<\/h2>\n<p>Enforcing strong identity depends on a centralized, modern, cloud-based directory solution, which we have in Microsoft Azure AD. Azure AD helps us bridge our cloud and on-premises identities by using Microsoft Azure AD Connect and AD FS, and it provides key functionality for enforcing strong identity across our hybrid environment:<\/p>\n<ul class=\"c-list\">\n<li>Microsoft Defender for Identity: We use Defender for Identity to monitor our on-premises Microsoft Active Directory signals to identify, detect, and investigate advanced threats and compromised identities. Defender for Identity supplies invaluable insights on identity configurations and suggested security best practices. Defender for Identity helps us dramatically reduce the attack surface area, making it more difficult for attackers to compromise user credentials and advance an attack.<\/li>\n<li>Integrate Microsoft Azure Advanced Threat Protection with Microsoft Cloud App Security: We use Microsoft Azure Advanced Threat Protection to identify risky user behavior when users access on-premises, nonmodern resources, such as file shares. This behavior analysis is factored into overall user risk assessment to block further access in the cloud.<\/li>\n<li>Application integration with Microsoft Azure AD: We require all applications to integrate with Azure AD by using OAuth 2.0 with the most up-to-date Microsoft Authentication Library (MSAL) We also use an extensive single-sign on store to enable strong authentication for third-party applications.<\/li>\n<li>Multifactor authentication: We require multifactor authentication to verify a user\u2019s identity before giving them access to corporate resources when they\u2019re not connected to the corporate network. People use multifactor authentication in a few ways, including Windows Hello for Business with PIN or biometric sign-in and Microsoft Azure AD multifactor authentication that uses a phone or the Microsoft Authenticator app. On domain-joined devices that we manage, multifactor authentication has become almost transparent to users.<\/li>\n<\/ul>\n<h2>Reducing dependency on passwords<\/h2>\n<p>Reducing password dependency to eliminate password usage has been in process at Microsoft for some time. Deploying a companywide strategy for eliminating passwords wasn\u2019t easy, but it also wasn\u2019t as complicated as many organizations might think it is. The goal isn\u2019t to eliminate password data but to reduce the need for the user to repeatedly use that password as part of the authentication process. We\u2019re working toward eliminating passwords at Microsoft by using several platforms and technologies:<\/p>\n<ul class=\"c-list\">\n<li>Multifactor authentication: Multifactor authentication is critical in reducing password usage. In Microsoft Azure AD, multifactor authentication enables the necessary factors for removing the password requirement for authentication. We widely use Azure AD multifactor authentication, Microsoft Authenticator, and Windows Hello for Business to facilitate multifactor authentication, but we also use other technology to enable multifactor authentication across a wide scope of platforms and use cases. For example, we use Fast Identity Online (FIDO) keys as a replacement for biometric data in Windows Hello and smart cards to control administrative access.<\/li>\n<li>Windows Hello for Business: We\u2019re using two-factor biometric authentication with Windows Hello for Business. This adds another dimension to the multifactor authentication environment across Windows 10 and Windows 11 devices and enables our users to replace password data with biometric data, such as a fingerprint. We\u2019re using Windows Hello for Business to support smart card\u2013like scenarios by using a certificate-based deployment, which provides easy certificate renewal and remote-access compatibility.<\/li>\n<li>Modernized hardware: Modernizing our hardware portfolio was an important part of enabling multifactor authentication and Windows Hello for Business capability, both of which rely on technologies such as Trusted Platform Module (TPM) 2.0 and FIDO 2.0 for core biometrics support.<\/li>\n<\/ul>\n<h2>Limiting access to data with least-privilege access<\/h2>\n<p>Implementing least-privilege access reduces the attack surface area for our identities with elevated privileges and ensures that our employees are always granted the level of access they require to perform the tasks their role requires. By default, identities begin with no access. In the least-privilege access model, systems grant access only when needed. Applications, services, and infrastructure only provide the minimum set of access required by their users. Our approach to least-privilege access involves several focal points:<\/p>\n<ul class=\"c-list\">\n<li>Reduce the impact of a compromised identity by progressively eliminating unnecessary access.<\/li>\n<li>Simplify implementation: Pursue complex implementation only when it corresponds with significant risk reduction, as with administrative accounts or high-risk environments.<\/li>\n<li>Invest in simplifying access-administration solutions for users and application owners.<\/li>\n<li>Prioritize central, preventative controls over distributed manual configurations.<\/li>\n<li>Prioritize a cloud-first approach, where the Zero Trust model is strongest and most active.<\/li>\n<\/ul>\n<p>The first step in implementing least-privilege was the identification and classification of those roles that absolutely required elevated access. However, not all elevated-privilege accounts are created equal. Limiting the attack surface visible to potential aggressors depends not only on reducing the number of elevated-privilege accounts. It also relies on only providing elevated-privilege accounts with the least-privilege access needed to get their respective jobs done.<\/p>\n<p>We can provide conditional access to applications with AD FS rules. We can vary the granularity of how we enforce multifactor authentication at an application level. AD FS is flexible and allows us to designate people or groups that can access an application, and how they must authenticate when they\u2019re on or outside the corporate network. Most users who access applications from the corporate network are allowed single-factor authentication, while users who access applications from the internet require multifactor authentication. Some applications are so critical that they require multifactor authentication even when the user accesses them from the corporate network.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"74\" class=\"alignnone size-medium wp-image-7448\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/key-takeaways-300x74.png\" alt=\"Key Takeaways\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/key-takeaways-300x74.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/key-takeaways.png 500w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><br \/>\nIdentity is a primary factor in determining access to corporate resources in the Zero Trust model. By enforcing strong identities, reducing dependency on passwords, and limiting access to data by using least-privilege access, we\u2019re creating an identity framework on which the entire Zero Trust model rests. As we continue to strengthen our processes for verifying identity throughout our digital estate, we\u2019re strengthening the remaining three pillars: device, access, and services, and, in turn, the entire Zero Trust model.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"81\" class=\"alignnone size-medium wp-image-7482\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/related_links-300x81.png\" alt=\"Related links\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/related_links-300x81.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2021\/10\/related_links.png 500w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p>\n<ul class=\"c-list\">\n<li><a href=\"https:\/\/www.microsoft.com\/en-us\/insidetrack\/verifying-devices-in-a-zero-trust-model\">Check out verifying devices in a Zero Trust model<\/a>.<\/li>\n<li><a href=\"https:\/\/www.microsoft.com\/en-us\/insidetrack\/implementing-a-zero-trust-security-model-at-microsoft\">Read more about implementing a Zero Trust security model at Microsoft<\/a>.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Identity-driven security is a core pillar of our Zero Trust model. Identities define the Zero Trust security boundary, and we use identity as the primary factor in how we allow access to corporate resources. When an identity tries to access any resource, we verify that identity with strong authentication, and we ensure that access is [&hellip;]<\/p>\n","protected":false},"author":133,"featured_media":8834,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"_hide_featured_on_single":false,"_show_featured_caption_on_single":true,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[1],"tags":[407,95],"coauthors":[646],"class_list":["post-8832","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-enterprise-mobility-and-security","tag-security","program-microsoft-digital-technical-stories","m-blog-post"],"jetpack_publicize_connections":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Verifying Identity in a Zero Trust Model Internally at Microsoft<\/title>\n<meta name=\"description\" content=\"See why Microsoft supports a Zero Trust security model that protects its customers, data, employees, and business in an increasingly complex world.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Verifying Identity in a Zero Trust Model Internally at Microsoft\" \/>\n<meta property=\"og:description\" content=\"See why Microsoft supports a Zero Trust security model that protects its customers, data, employees, and business in an increasingly complex world.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/\" \/>\n<meta property=\"og:site_name\" content=\"Inside Track Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-23T13:51:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-29T18:31:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193_hero.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1040\" \/>\n\t<meta property=\"og:image:height\" content=\"585\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Inside Track staff\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Inside Track staff\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/\",\"url\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/\",\"name\":\"Verifying Identity in a Zero Trust Model Internally at Microsoft\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193_hero.jpg\",\"datePublished\":\"2023-05-23T13:51:13+00:00\",\"dateModified\":\"2023-06-29T18:31:36+00:00\",\"author\":{\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/d87d5d73eed76dd055086299c842c17e\"},\"description\":\"See why Microsoft supports a Zero Trust security model that protects its customers, data, employees, and business in an increasingly complex world.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193_hero.jpg\",\"contentUrl\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193_hero.jpg\",\"width\":1040,\"height\":585,\"caption\":\"Microsoft is verifying identity across the environment to support a Zero Trust security model that informs how Microsoft protects its customers, data, employees, and business in an increasingly complex and dynamic digital world.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Verifying identity in a Zero Trust model internally at Microsoft\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/\",\"name\":\"Inside Track Blog\",\"description\":\"How Microsoft does IT\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/d87d5d73eed76dd055086299c842c17e\",\"name\":\"Inside Track staff\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/image\/fb338dea806293f999356f7d8a399348\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/3788032f4762be09ee17b2ec39f3d75b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/3788032f4762be09ee17b2ec39f3d75b?s=96&d=mm&r=g\",\"caption\":\"Inside Track staff\"},\"description\":\"Questions? Send us a note: msitstaff@microsoft.com\",\"url\":\"https:\/\/www.microsoft.com\/insidetrack\/blog\/author\/insidetrack\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Verifying Identity in a Zero Trust Model Internally at Microsoft","description":"See why Microsoft supports a Zero Trust security model that protects its customers, data, employees, and business in an increasingly complex world.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/","og_locale":"en_US","og_type":"article","og_title":"Verifying Identity in a Zero Trust Model Internally at Microsoft","og_description":"See why Microsoft supports a Zero Trust security model that protects its customers, data, employees, and business in an increasingly complex world.","og_url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/","og_site_name":"Inside Track Blog","article_published_time":"2023-05-23T13:51:13+00:00","article_modified_time":"2023-06-29T18:31:36+00:00","og_image":[{"width":1040,"height":585,"url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193_hero.jpg","type":"image\/jpeg"}],"author":"Inside Track staff","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Inside Track staff","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/","url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/","name":"Verifying Identity in a Zero Trust Model Internally at Microsoft","isPartOf":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193_hero.jpg","datePublished":"2023-05-23T13:51:13+00:00","dateModified":"2023-06-29T18:31:36+00:00","author":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/d87d5d73eed76dd055086299c842c17e"},"description":"See why Microsoft supports a Zero Trust security model that protects its customers, data, employees, and business in an increasingly complex world.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/#primaryimage","url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193_hero.jpg","contentUrl":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193_hero.jpg","width":1040,"height":585,"caption":"Microsoft is verifying identity across the environment to support a Zero Trust security model that informs how Microsoft protects its customers, data, employees, and business in an increasingly complex and dynamic digital world."},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/verifying-identity-in-a-zero-trust-model\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/insidetrack\/blog\/"},{"@type":"ListItem","position":2,"name":"Verifying identity in a Zero Trust model internally at Microsoft"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#website","url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/","name":"Inside Track Blog","description":"How Microsoft does IT","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/insidetrack\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/d87d5d73eed76dd055086299c842c17e","name":"Inside Track staff","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/image\/fb338dea806293f999356f7d8a399348","url":"https:\/\/secure.gravatar.com\/avatar\/3788032f4762be09ee17b2ec39f3d75b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3788032f4762be09ee17b2ec39f3d75b?s=96&d=mm&r=g","caption":"Inside Track staff"},"description":"Questions? Send us a note: msitstaff@microsoft.com","url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/author\/insidetrack\/"}]}},"jetpack_featured_media_url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2022\/11\/10193_hero.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9hcZA-2is","_links":{"self":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts\/8832"}],"collection":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/users\/133"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/comments?post=8832"}],"version-history":[{"count":6,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts\/8832\/revisions"}],"predecessor-version":[{"id":8946,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts\/8832\/revisions\/8946"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/media\/8834"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/media?parent=8832"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/categories?post=8832"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/tags?post=8832"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/coauthors?post=8832"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}