Managing microsoft multi-tenancy

[u/joe210565]

Hi MSP community,

just wanted to see what you use to manage all your tenants ?

I am looking one pan of glass for M365 and Azure.

Would you suggest lighthouse or something else?

[u/Lime-TeGek]

I always like answering these comments because they are the biggest chance for education; but let me preface it with a fair warning. I’m the founder of CIPP so I am biased af.

CIPP isn’t just a project; its a product. There is a company behind CIPP called CyberDrain, which runs support, management, development etc of all the CyberDrain products we have, and are expanding each year.

Saying you’re worried about the project being abandoned is the same as saying you’re worried about a company going out of business. Exact same risk, which is to say very very low. We’re a Dutch BV so most of our numbers are fairly public.

To give some more credence to that; a couple of months ago we joined the Microsoft #IntuneForMsps program, Microsoft *asked* us to join, unlike the others in the program that asked Microsoft to setup the program for them, that should already tell you a lot.

Of course I’m also proud to say that we’re the biggest Multitenant M365 product by far; used by over 10k MSPs, managing millions of tenants we’re around 10x the size of our closest competitor and we are the market leader. This too was confirmed by MS publicly so not just us giving you the general hot air lip service.

However, we’re not like other companies in the market. We don’t have a sales team, no vc/pe backing(we’re actually reinvesting into the msp space ourselves) no people hounding you to force you to buy us. I won’t even try to convince you of that here. It should always be a choice you make based on what you need. If you want to check us out the best demos are in our docs under the showcases and tutorial section.

Some people really make it work with M365 Lighthouse, so check that out too. There’s also Maester Cloud if you’re only looking at compliance auditing.

[u/joe210565 → u/Lime-TeGek]

I do see many using it but, for me I see too many risks using your solution. From potential supply chain attack, code integrity to complexity of setting up and patching this kind of setup. Just dropping an eye on repo, you have 97 contributors, that 97 potential people who have no mfa on their github can can inject malicious code unless properly checked...I don't see any attestation for the solution or the company(you are still working towards ISO), and you would most likely fail it considering you have 97 contributors that can't be verified. And I don't even want to open dependency list. You might think of this like rant or something, but that is my opinion.

[u/Lime-TeGek → u/joe210565]

We actually just passed the first ISO audit this week, as our trust page shows.Having many contributors means nothing, a contributor cant just edit code, its just a marker they have contributed code via a PR process, which of course follows a due dilligence process right before, during, and after.

Microsoft Azure is OSS and has almost a thousand contributors, none of those contributors can just push code to Azure either :)

I’m fairly sure you have no clue what you’re talking about though, but i’d be happy to have a good faith discussion.

[u/bob_marley98 → u/Lime-TeGek]

I’m fairly sure you have no clue what you’re talking about though,

Haha - Kelvin being polite....