How to find unattested device-bound passkeys in Entra ID
Attestation is an important topic in the context of device-bound passkeys. Seeing the creative work from Nathan, Fabian, and Jos coming together, you might…
Category
Security
The hidden risk of using aka.ms shortURLs for Microsoft portals
We all love them: Microsoft's short URLs at aka.ms. The aka.ms domain is owned by Microsoft and is used to shorten URLs for many purposes. I even got one…
Jan's resource catalog to learn all about agents (from an Entra ID perspective)
I've been digging into agents lately, especially the identity and security aspects. As this whole concept is quite new to all of us, it's always hard to know…
Least privilege for Temporary Access Pass creation
Today, giving out Temporary Access Passes for Microsoft 365 is a very common task. And attackers love them as well, since they bypass some security policies,…
Access Azure Virtual Desktop and Windows 365 Cloud PC from non-managed devices
Many organizations use Azure Virtual Desktop or Windows 365 Cloud PC. But how do we secure access to those resources? A very common use case is to connect from…
How to enable passkeys for guest users in Entra ID
Passkeys like FIDO security keys, synced passkeys, and passkeys in Microsoft Authenticator are secure and convenient authentication methods for your end users.…
Store your Microsoft 365 passkeys in 1Password
Syncable passkeys in Microsoft 365 and Entra ID are here, so we are no longer limited to the Authenticator app and FIDO2 keys for storing passkeys. Passkeys…
KB - Enable Single Sign On for Windows 365 Cloud PC
This short tutorial explains how to enable Single Sign-On for Windows 365 Cloud PC using the Graph Explorer.
Dynamic Conditional Access policies using custom security attributes
Conditional Access policies can become very complex and quickly grow out of control. Custom requirements, exceptions, and edge cases often cause policy drift.…
A public bug report for Entra ID application policies
I've spent the last couple of nights trying out this new feature in Entra ID: application policies. I've already written two (1,2) blog posts about it, but…
A closer look at Entra Application policies to govern secrets and certificates
My latest post on this topic introduced the new admin interface on Application Policies in Entra ID. Although the APIs had been around for a while, I…
Trigger Logic App on group membership changes in Entra ID
A couple of years ago, I stumbled upon a neat Logic App / Power Automate connector that can respond to changes in group membership. Act on group membership…