Latest post
How to set up SMS or voice with your own telecom provider in Microsoft Entra
Set up Microsoft Entra SMS and voice authentication with a Soprano telecom provider and an Azure Function integration.
JanBakker.tech
Allow password change after secure sign-in
Allow passwordless users to change their Microsoft Entra cloud password after secure sign-in without entering their current password.
A new workaround for authentication strength Conditional Access policy loops: Microsoft Authenticator Credential Registration service principal
A new Conditional Access workaround for Microsoft Authenticator passkey registration loops: exclude the Credential Registration resource.
Optimizations for passkey registration experience you might have missed
MC1440968 improves passkey registration, prioritizes local passkeys, and the wizard now shows allowed AAGUIDs.
Prevent users from creating new agent identity blueprints
Restrict who can create Microsoft Entra agent identity blueprints and review the roles and apps that can still create them.
Cloud Sync provisioning agent fails to start with a gMSA
Troubleshoot a Cloud Sync provisioning agent that fails to start with a gMSA because of a missing managed-account flag or password retrieval permissions.
From WordPress to Hugo on Cloudflare
Why I moved janbakker.tech from WordPress to Hugo on Cloudflare, including the migration, costs, comments, and publishing workflow.
Where to store your Microsoft 365 passkey?
Microsoft 365 (Entra ID) has supported passkeys for a long time now. From auto-registered passkeys like Windows Hello to synced passkeys.
Entra ID telephony providers for SMS and voice MFA: first look
Microsoft has published the first documentation for Choose Your Own Telephony Provider in Entra ID, together with an FAQ that might answer some of your…
Finally a smooth(er) passkey onboarding experience in Microsoft 365!
Microsoft is doing a lot to enhance the onboarding of passkeys. The three major changes behind this are:
How to create a Microsoft 365 device-bound passkey on macOS
I did a discovery today, and I want to share it, because I did not know this was an option. Up until now, I always thought that device-bound passkeys where…
How to add granular amr claims to your SAML apps in Entra ID
In my last post, I covered how Entra ID now automatically sends the amr and acr claims for Salesforce, so its phishing-resistant MFA check finally has…