Where to store your Microsoft 365 passkey?
Microsoft 365 (Entra ID) has supported passkeys for a long time now. From auto-registered passkeys like Windows Hello to synced passkeys.
Archive
Posts
Entra ID telephony providers for SMS and voice MFA: first look
Microsoft has published the first documentation for Choose Your Own Telephony Provider in Entra ID, together with an FAQ that might answer some of your…
Finally a smooth(er) passkey onboarding experience in Microsoft 365!
Microsoft is doing a lot to enhance the onboarding of passkeys. The three major changes behind this are:
How to create a Microsoft 365 device-bound passkey on macOS
I did a discovery today, and I want to share it, because I did not know this was an option. Up until now, I always thought that device-bound passkeys where…
How to add granular amr claims to your SAML apps in Entra ID
In my last post, I covered how Entra ID now automatically sends the amr and acr claims for Salesforce, so its phishing-resistant MFA check finally has…
Lock or sign-out when Yubikey is removed from the device
I didn't know there was already a solution for this, and maybe you are looking for it too. I learned about this from the Blue Security Podcast.
Writing Maester tests using AI - From idea to Pull Request
I love Maester. No doubt about that. I've made several contributions to this open-source project before, but it took me a lot of effort to learn how the…
Admin control for SSO prompts in Windows; finally, an off switch!
If you've been paying attention to the EEA sign-in changes over the past while, you'll know Microsoft started prompting users before reusing their Windows…
Passkeys by default and retirement of Microsoft-provided SMS and voice authentication - A guide to stay calm
I don't have all the answers, but I promise to keep this post updated with all the details I find.
KB - employeeLeaveDateTime show empty (null)
This is a knowledge base item. I hope it will help you someday.
Entra ID SAML authnmethodsreferences (AMR) now supports phishing-resistant MFA
If you've been following the Salesforce phishing-resistant MFA (PRMFA) requirement story, you know the clock has been ticking. Salesforce has been pushing…