How to add granular amr claims to your SAML apps in Entra ID
In my last post, I covered how Entra ID now automatically sends the amr and acr claims for Salesforce, so its phishing-resistant MFA check finally has…
Category
Entra
Lock or sign-out when Yubikey is removed from the device
I didn't know there was already a solution for this, and maybe you are looking for it too. I learned about this from the Blue Security Podcast.
Writing Maester tests using AI - From idea to Pull Request
I love Maester. No doubt about that. I've made several contributions to this open-source project before, but it took me a lot of effort to learn how the…
Admin control for SSO prompts in Windows; finally, an off switch!
If you've been paying attention to the EEA sign-in changes over the past while, you'll know Microsoft started prompting users before reusing their Windows…
Passkeys by default and retirement of Microsoft-provided SMS and voice authentication - A guide to stay calm
I don't have all the answers, but I promise to keep this post updated with all the details I find.
KB - employeeLeaveDateTime show empty (null)
This is a knowledge base item. I hope it will help you someday.
Entra ID SAML authnmethodsreferences (AMR) now supports phishing-resistant MFA
If you've been following the Salesforce phishing-resistant MFA (PRMFA) requirement story, you know the clock has been ticking. Salesforce has been pushing…
Domainless SAML federation in Microsoft Entra External ID
If you've ever set up direct federation with a SAML Identity Provider in Microsoft Entra External ID, you'll know the pain. You configure everything correctly,…
Use Device Code Flow to register a passkey in Microsoft Authenticator App
The other day, I was doing some research in my lab, and had to register a new passkey a couple of times. At some point, I stumbled upon the device code flow in…
Entra ID Governance - View approver information for pending requests
A new feature in Entra ID Governance was introduced and enabled by default.
Configurable token lifetimes in Entra ID
Today, a quick post about setting up token lifetime policies in Entra ID. In some use cases, organizations require a short access token for highly privileged…