Configurable token lifetimes in Entra ID
Today, a quick post about setting up token lifetime policies in Entra ID. In some use cases, organizations require a short access token for highly privileged…
Category
Security
Your service principals probably don't need secrets
Application policies in Entra have been around for a while now to manage the use of secrets, but I don't see many folks using them. It's probably because…
Block or limit multi-tenant and consumer applications in Entra ID
Two new policies have been added to the recently introduced Application Policies in Entra ID!
Conditional Access Optimization Agent knowledge base
Y'all know this song by the Beatles, right?
How to find unattested device-bound passkeys in Entra ID
Attestation is an important topic in the context of device-bound passkeys. Seeing the creative work from Nathan, Fabian, and Jos coming together, you might…
The hidden risk of using aka.ms shortURLs for Microsoft portals
We all love them: Microsoft's short URLs at aka.ms. The aka.ms domain is owned by Microsoft and is used to shorten URLs for many purposes. I even got one…
Jan's resource catalog to learn all about agents (from an Entra ID perspective)
I've been digging into agents lately, especially the identity and security aspects. As this whole concept is quite new to all of us, it's always hard to know…
Least privilege for Temporary Access Pass creation
Today, giving out Temporary Access Passes for Microsoft 365 is a very common task. And attackers love them as well, since they bypass some security policies,…
Access Azure Virtual Desktop and Windows 365 Cloud PC from non-managed devices
Many organizations use Azure Virtual Desktop or Windows 365 Cloud PC. But how do we secure access to those resources? A very common use case is to connect from…
How to enable passkeys for guest users in Entra ID
Passkeys like FIDO security keys, synced passkeys, and passkeys in Microsoft Authenticator are secure and convenient authentication methods for your end users.…
Store your Microsoft 365 passkeys in 1Password
Syncable passkeys in Microsoft 365 and Entra ID are here, so we are no longer limited to the Authenticator app and FIDO2 keys for storing passkeys. Passkeys…
KB - Enable Single Sign On for Windows 365 Cloud PC
This short tutorial explains how to enable Single Sign-On for Windows 365 Cloud PC using the Graph Explorer.