• Natanael@infosec.pub
    link
    fedilink
    English
    arrow-up
    9
    ·
    1 day ago

    Try supporting Onedrive for business when Onedrive often fails SSO and people use their work email address to create a personal account because by default Microsoft encourages that unless you aggressively lock that down, and then people will have sensitive work data on an account you can’t control, and if they switch computers it gets worse because if they don’t know that password and if the old computer is broken there’s nothing the business can do to get the data.

    Oh, and Adobe does the same thing. Neither tell you upfront that you should disable creation of personal accounts using the work email address/domain. The user won’t notice because it doesn’t occur to them to select “organization account” and they just click the first option.

    Which is also both a security nightmare and GDPR nightmare.

    • myyass@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      20 hours ago

      Something like this happened to me and I’m not very well tech versed anymore. But I’ll put it this way, somehow confidential government files (nothing too serious) from 2015 ended up on my computer that I built a few years ago. I honestly I’m still baffled and yes, I used my old email because I was lazy and was going to use this for gaming anyway.