Enforce FIDO2 PIN complexity with Microsoft Entra Conditional Access Authentication Strengths.
As you may or may not know, most FIDO2 security keys can be set up with easy PINs like 1111 or 123456. Just like passwords, users tend to come up with…
Category
Entra
Manage user-preferred multi-factor authentication method in Microsoft Entra ID
This post is all about setting the preferred multi-factor authentication method using Graph API. We already know the system-preferred multi-factor…
Company branding and custom CSS in Azure Active Directory
Company branding in Azure AD is a nice feature that allows administrators to prettify the sign-in experience for their end-users. It also comes with the…
Running Evilginx 3.0 on Windows
In case you missed it: Evilginx 3 was recently launched to the public. This release is a quality-of-life update and has many fixes and a few new features…
Step-up authentication with Defender for Cloud Apps and Authentication Context
In this post, I will show you how you can integrate Azure AD's Authentication Context with Defender for Cloud Apps to require step-up authentication for…
Send an email on a new Azure MFA method registration
I've done quite some Azure MFA projects over time (and counting), and as we mainly focus on the technical side, there are also practical sides to consider.…
Report Suspicious Activity & Fraud Alert for Azure MFA
A new feature popped up in Azure AD. Well, not entirely new, I must say. Reading from the docs, Report Suspicious Activity is an enhancement of the Fraud Alert…
Authenticator Lite - Approve Azure MFA prompts with the Outlook app
Microsoft released a new feature where the Outlook mobile app now has some of the Microsoft Authenticator App features onboard. Users can now enroll for Azure…
System-preferred multifactor authentication in Azure AD. Don't settle for less.
A new feature has popped up in Azure AD: System-preferred multifactor authentication (MFA). This will allow administrators to enforce the most secure method…
Duplicate Azure Active Directory Conditional Access policies
In this post, we look at managing Conditional Access policies and, in particular, duplicating existing policies. This can be super handy when you:
Break glass accounts and Entra ID Security Defaults
Update 16-06-2026 — FIDO2 Sign-In Failure: AADSTS135016Some users reported being unable to sign in with their FIDO2 security keys, receiving error…
Goodbye legacy SSPR and MFA settings. Hello Authentication Methods Policies!
I've got some exciting news to share today. Microsoft has launched a public preview called "Authentication Methods Policy Convergence." I was part of the…