Authentication, Conditional Access, identity governance, and resilient access design.
Microsoft is making passkeys the default authentication method in Entra ID, so now is the time to start planning your move to phishing-resistant MFA. This guide covers device-bound vs synced passkeys, Passkey Profiles, Authentication Strengths, Conditional Access, rollout strategy, legacy app considerations and the practical steps to get your Microsoft 365 environment ready.
The Microsoft Outlook Companion app quietly registers itself as an MFA method — and most admins don't realise until it's already causing inconsistent auth flows across their user base. In this post, I walk through why I recommend disabling it, why you can't just flip the switch without breaking things, and how to use KQL to identify exactly who's using it before you do
In Part 2, we simulate HR-driven user provisioning with PowerShell, trigger onboarding workflows, and walk through the end-user experience of requesting and receiving access via Entitlement Management. See how approvals, automation, and Access Packages remove the manual workload from IT.
Learn how Access Packages in Microsoft Entra ID can streamline employee onboarding. This post covers why Access Packages matter, how to structure dynamic groups, and how to build a fully governed Access Package using catalogs, approvals, and lifecycle settings.
Learn how to detect when a Global Admin silently elevates their access across all Azure subscriptions using Entra ID, Log Analytics, Azure Monitor, and Defender for Cloud Apps. This guide breaks down why elevation is risky, how the toggle works, and the exact steps to build alerts that keep your Azure environment secure.
When Conditional Access meets Zero Trust, even the best intentions can backfire. In this post, we explore a real-world edge case where strict policy design blocked users from registering MFA—and how a layered policy workaround restored functionality without compromising security.
Troubleshooting a missing enterprise app issue in Entra ID during a zero-trust Conditional Access policy rollout with workaround solutions.
Prepare for Microsoft’s mandatory MFA with practical tips on securing accounts, migrating services, and optimizing Conditional Access.
Explore storing Microsoft Entra logs via Azure Monitor, Storage Accounts, and Event Hubs, each offering unique benefits for IT security.
Discover Microsoft Entra Private Access: advanced, secure remote access for corporate resources, surpassing traditional VPN limitations.
Boost security, speed, and access with Microsoft's Entra Internet for M365. A game-changer!
Cross tenant sync is a feature I've been waiting to see for a while and with the announcement of cross tenant access settings, I knew it...
This article will go into detail on how to configure Azure MFA for access to on-premises VPN and RD Gateway.
Microsoft as of August 31 2022 will retire all 1.x versions of Azure AD Connect because they include SQL Server 2012 components. If you...
Collaboration with external partners is becoming more and more the norm, COVID pushed most organisations into the cloud and even helped...
It's no secret that Conditional Access is the pillar of any good security plan and one of the best features available as part of the...
