System-preferred multifactor authentication in Azure AD. Don't settle for less.
A new feature has popped up in Azure AD: System-preferred multifactor authentication (MFA). This will allow administrators to enforce the most secure method…
Category
Security
Duplicate Azure Active Directory Conditional Access policies
In this post, we look at managing Conditional Access policies and, in particular, duplicating existing policies. This can be super handy when you:
Break glass accounts and Entra ID Security Defaults
Update 16-06-2026 — FIDO2 Sign-In Failure: AADSTS135016Some users reported being unable to sign in with their FIDO2 security keys, receiving error…
Goodbye legacy SSPR and MFA settings. Hello Authentication Methods Policies!
I've got some exciting news to share today. Microsoft has launched a public preview called "Authentication Methods Policy Convergence." I was part of the…
How to set up Evilginx to phish Office 365 credentials
This post is based on Evilginx 2 and still works, as I forked the old repository to my personal Github, and did some tweaks to make it work. I recently created…
Use a FIDO2 security key as Azure MFA verification method
This news seems to be kept under the radar a little bit, but I wanted to point out a new feature in Azure AD that might help out some organizations with their…
Get alerts on Azure resource assignments made outside PIM
Microsoft released a new public preview where admins can be alerted when assignments to Azure resources are made outside of Privileged Identity Management.
Multi-stage approval for privileged roles using Azure AD Identity Governance
Privileged Identity Management is a great feature within Azure AD to provide just-in-time access to your admin roles and Azure resources. But some roles may…
10 tips to secure your identities in Microsoft 365
I was recently invited by the Dutch Virtual Desktop User Group to present a session about Identity Security. Now, because this was in Dutch (my native…
Access reviews for Azure AD directory roles
This blog post is for all those organizations out there with stale, overprivileged accounts having standing access to Azure AD roles, that nobody knows about,…
Onboard FIDO2 keys using Temporary Access Pass in Azure AD
One of the requirements to use FIDO2 security keys with your Microsoft 365 or Azure Active Directory account is multi-factor authentication. So if the user has…
Use Registration campaign to promote Microsoft Authenticator App
With all the new improvements to the Microsoft Authenticator App, this seems a good time to highlight a new capability in Azure AD: Registration Campain, also…