Sign in to confirm you’re not a bot
This helps protect our community. Learn more
Armchair Architects: Zero Trust Architecture (pt 2)
39Likes
924Views
Mar 112025
This episode of Armchair Architects— part of the Azure Essentials Show— is the second of two parts of an ongoing discussion on Zero Trust Architecture (ZTA). Our architects, Uli, Eric (@mougue) and David delve deeper into the core principles of ZTA, including identity access management, passwordless authentication, multifactor authentication, and continuous authentication. The trio also explore various protocols such as OAuth 2.0, OpenID, and SAML, and discuss practical considerations for implementing ZTA in application design and microservices communication. Finally, Uli shares details of Microsoft’s Future Trust Initiative. Be sure to watch Armchair Architects: Zero Trust Architecture (pt 1) before watching this episode. (https://aka.ms/AzEssentials/182) Resources • What is Zero Trust? https://learn.microsoft.com/security/... • Zero Trust security https://learn.microsoft.com/azure/sec... • Use API gateways in microservices https://learn.microsoft.com/azure/arc... • Azure Identity Management and access control security best practices https://learn.microsoft.com/azure/sec... • Use MTLS in Azure Container Apps https://learn.microsoft.com/azure/con... • Securing workload identities https://learn.microsoft.com/entra/id-... • Microsoft Secure Future Initiative https://www.microsoft.com/trust-cente... • Training: Zero Trust https://learn.microsoft.com/training/... • Training: Microsoft Cybersecurity Architect https://learn.microsoft.com/training/... Connect • Ulrich (Uli) Homann   / ulrichhomann   • Eric Charran   / ericcharran   • David Blank-Edelman   / dnblankedelman   Related episodes • Zero Trust Architecture (part 1) https://aka.ms/AzEssentials/182 • Watch all the Armchair Architects episodes https://aka.ms/ArmchairArchitects • Watch the Azure Essentials Show https://aka.ms/AzureEssentialsShow 0:00 Introduction 0:40 ZTA not part of app design 2:16 What if requirements change 3:14 Context-aware policies and signals 4:12 Mutual TLS authentication 5:20 Eric’s next steps for architects 6:50 Uli’s next steps for architects 7:38 Microsoft Secure Future Initiative

Follow along using the transcript.

Microsoft Developer

589K subscribers