How to add granular amr claims to your SAML apps in Entra ID
In my last post, I covered how Entra ID now automatically sends the amr and acr claims for Salesforce, so its phishing-resistant MFA check finally has…
Category
Security
Lock or sign-out when Yubikey is removed from the device
I didn't know there was already a solution for this, and maybe you are looking for it too. I learned about this from the Blue Security Podcast.
Writing Maester tests using AI - From idea to Pull Request
I love Maester. No doubt about that. I've made several contributions to this open-source project before, but it took me a lot of effort to learn how the…
Admin control for SSO prompts in Windows; finally, an off switch!
If you've been paying attention to the EEA sign-in changes over the past while, you'll know Microsoft started prompting users before reusing their Windows…
Passkeys by default and retirement of Microsoft-provided SMS and voice authentication - A guide to stay calm
I don't have all the answers, but I promise to keep this post updated with all the details I find.
Entra ID SAML authnmethodsreferences (AMR) now supports phishing-resistant MFA
If you've been following the Salesforce phishing-resistant MFA (PRMFA) requirement story, you know the clock has been ticking. Salesforce has been pushing…
Use Device Code Flow to register a passkey in Microsoft Authenticator App
The other day, I was doing some research in my lab, and had to register a new passkey a couple of times. At some point, I stumbled upon the device code flow in…
Configurable token lifetimes in Entra ID
Today, a quick post about setting up token lifetime policies in Entra ID. In some use cases, organizations require a short access token for highly privileged…
Your service principals probably don't need secrets
Application policies in Entra have been around for a while now to manage the use of secrets, but I don't see many folks using them. It's probably because…
Block or limit multi-tenant and consumer applications in Entra ID
Two new policies have been added to the recently introduced Application Policies in Entra ID!
Conditional Access Optimization Agent knowledge base
Y'all know this song by the Beatles, right?