No, your NHIs can't use passwords either!
For human identities, going passwordless is becoming pretty standard these days. It looks like passkeys are getting some good traction, and more and more…
Category
Security
You shall not pass(key)! (updated)
In a previous blog post, I briefly touched on all the current caveats involved with passkeys in Entra ID. One of the most raised questions is around the…
Security Info Registration. Entra ID's rabbit hole.
This blog post needs a brief introduction. Bear with me.
KB - We detected that this particular key type has been blocked by your organization
This is a knowledge base item. Hope it will help you someday.
Poor man’s IGA: Generate Temporary Access Pass for joiners
Today, we look at a joiner scenario, where you want to trigger a time-based workflow to send a Temporary Access Pass 7 days before the employee's start date.
Poor man's IGA: Revoke all refresh tokens for user
Today, we look at Microsoft Entra ID Lifecycle Workflows. Microsoft has recently introduced a new task that revokes a user's refresh token. Consider scenarios…
Unlocking the Power of employeeHireDate in Entra ID Dynamic Groups
Disclaimer: The main structure of this blog post is created by Claude 3.7 Sonnet. Together with Lokka, I figured out all the supported operators by testing all…
Register Yubikeys on behalf of your users with YubiEnroll
In an earlier post, I showed several ways to (bulk) provision Yubikeys (or keys from other vendors) in Microsoft Entra using the provisioning APIs. In this…
How to restrict Device Code Flow in Entra ID
For good reasons, device code flow in Entra ID is getting a lot of attention. Attackers heavily use it to get access to Microsoft 365 accounts and data. Device…
Evilginx loves Temporary Access Passes too
Evilginx is known for capturing user cookies, even if they are secured by MFA methods like SMS, TOTP, push notifications or passwordless phone sign-in. In…
Things you should know before rolling out device-bound passkeys in Microsoft Authenticator App
As passkeys get more traction in Microsoft 365, more and more companies are looking to strengthen their identity posture by enrolling passkeys for their…
Conditional Access risk policies. Don't get fooled!
Microsoft Entra ID Protection and Microsoft Entra Conditional Access work well together. If your organization owns an Entra Premium P2 license, you likely have…