How to restrict Device Code Flow in Entra ID
For good reasons, device code flow in Entra ID is getting a lot of attention. Attackers heavily use it to get access to Microsoft 365 accounts and data. Device…
Category
Entra
Evilginx loves Temporary Access Passes too
Evilginx is known for capturing user cookies, even if they are secured by MFA methods like SMS, TOTP, push notifications or passwordless phone sign-in. In…
Things you should know before rolling out device-bound passkeys in Microsoft Authenticator App
As passkeys get more traction in Microsoft 365, more and more companies are looking to strengthen their identity posture by enrolling passkeys for their…
Conditional Access risk policies. Don't get fooled!
Microsoft Entra ID Protection and Microsoft Entra Conditional Access work well together. If your organization owns an Entra Premium P2 license, you likely have…
Microsoft Entra ID Governance: Show suggested access packages in My Access
Today's post is about a new feature in Entra ID's Identity Governance: Show suggested access packages in My Access.
Use Requestor information in Entra ID Access Packages as input for Custom Extensions
In a previous blog post, I explained a proof of concept in which we use Entra ID Governance Access Packages to request a Temporary Access Pass on behalf of…
Request Temporary Access Pass on behalf of others via Entra ID Governance Access Package
While looking at this new feature (Request access packages on-behalf-of other users (Preview) - Microsoft Entra ID Governance | Microsoft Learn), an…
Selfservice for hardware (OATH) tokens in Entra ID.
One of the longest-running previews in Entra ID is the support for hardware (OATH) tokens. Hardware tokens can create OTP tokens that can be used to satisfy…
Register Yubikeys on behalf of your users with Microsoft Entra ID FIDO2 provisioning APIs
Microsoft recently announced their new FIDO2 provisioning APIs within Microsoft Entra ID. While users can register their FIDO2 keys fairly easily with a…
All you need to know about the mandatory multifactor authentication for Azure and other administration portals
In case you didn't get the latest memo, Microsoft is tightening the security around the Azure and Microsoft 365 admin portals by enforcing multifactor…
Temporary exclusions for Conditional Access using PIM for Groups
Conditional Access include and exclude groups cannot be messed with. As we have seen in a previous blog post, this will impact your security posture. But what…
Prevent Conditional Access bypass with Restricted Management Administrative Units in Entra ID
Bypassing Conditional Access is easy. That's because most Conditional Access policies rely on Entra ID Security Groups. Since Entra ID is very "flat" by…