Request Temporary Access Pass on behalf of others via Entra ID Governance Access Package
While looking at this new feature (Request access packages on-behalf-of other users (Preview) - Microsoft Entra ID Governance | Microsoft Learn), an…
Category
Security
Evilginx Mastery Course | What I learned
A couple of years back, I was really struggling to get Evilginx up and running. The main reason was that I had forgotten how to do it by the time I needed an…
Selfservice for hardware (OATH) tokens in Entra ID.
One of the longest-running previews in Entra ID is the support for hardware (OATH) tokens. Hardware tokens can create OTP tokens that can be used to satisfy…
Register Yubikeys on behalf of your users with Microsoft Entra ID FIDO2 provisioning APIs
Microsoft recently announced their new FIDO2 provisioning APIs within Microsoft Entra ID. While users can register their FIDO2 keys fairly easily with a…
All you need to know about the mandatory multifactor authentication for Azure and other administration portals
In case you didn't get the latest memo, Microsoft is tightening the security around the Azure and Microsoft 365 admin portals by enforcing multifactor…
Temporary exclusions for Conditional Access using PIM for Groups
Conditional Access include and exclude groups cannot be messed with. As we have seen in a previous blog post, this will impact your security posture. But what…
Prevent Conditional Access bypass with Restricted Management Administrative Units in Entra ID
Bypassing Conditional Access is easy. That's because most Conditional Access policies rely on Entra ID Security Groups. Since Entra ID is very "flat" by…
Get started with passkeys in Microsoft 365
It's here! A long-awaited feature in Microsoft 365 is finally there. Now, in public preview, organizations can add another phishing-resistant credential to…
How to simulate risk in Microsoft Entra ID Protection
Entra ID protection is an excellent feature amongst the other services in the Entra Premium P2 license SKU. Microsoft Entra ID Protection detects…
Microsoft 365 end-user notifications for changes in authentication methods
When moving away from traditional and weak authentication methods like passwords to stronger ones like Authenticator App and passkeys, it's essential to keep…
Viewing changes to Conditional Access policies just became easier!
Today, a quick tip for all Entra admins out there. Conditional Access policies can be subject to change. When a policy is changed, its not very easy to see…
A Thread on Frosty Fiascos: Delving into the Microsoft Midnight Blizzard Hack
This post is all about the hack on Microsoft by Midnight Blizzard (NOBELIUM, Cozy Bear, APT29)A lot has been said already, and this event has many angles. This…