Domainless SAML federation in Microsoft Entra External ID
If you've ever set up direct federation with a SAML Identity Provider in Microsoft Entra External ID, you'll know the pain. You configure everything correctly,…
Category
Entra
Use Device Code Flow to register a passkey in Microsoft Authenticator App
The other day, I was doing some research in my lab, and had to register a new passkey a couple of times. At some point, I stumbled upon the device code flow in…
Entra ID Governance - View approver information for pending requests
A new feature in Entra ID Governance was introduced and enabled by default.
Configurable token lifetimes in Entra ID
Today, a quick post about setting up token lifetime policies in Entra ID. In some use cases, organizations require a short access token for highly privileged…
Your service principals probably don't need secrets
Application policies in Entra have been around for a while now to manage the use of secrets, but I don't see many folks using them. It's probably because…
Block or limit multi-tenant and consumer applications in Entra ID
Two new policies have been added to the recently introduced Application Policies in Entra ID!
KB - Entra Private Access Session persistence
This is a knowledge base item. I hope it will help you someday.
Conditional Access Optimization Agent knowledge base
Y'all know this song by the Beatles, right?
How to get better with Graph API - Part one
As you might know, Graph API is an important part of Microsoft 365. Everything (or most) of the things you see in the Entra admin center or Microsoft Admin…
What admins can learn from the new Entra ID Groups Insights blade
Microsoft released a new overview in Entra ID: Entra ID Groups Insights.
How to find unattested device-bound passkeys in Entra ID
Attestation is an important topic in the context of device-bound passkeys. Seeing the creative work from Nathan, Fabian, and Jos coming together, you might…
The hidden risk of using aka.ms shortURLs for Microsoft portals
We all love them: Microsoft's short URLs at aka.ms. The aka.ms domain is owned by Microsoft and is used to shorten URLs for many purposes. I even got one…