Poor man’s IGA: Generate Temporary Access Pass for joiners
Today, we look at a joiner scenario, where you want to trigger a time-based workflow to send a Temporary Access Pass 7 days before the employee's start date.
Archive
Posts
Poor man's IGA: Revoke all refresh tokens for user
Today, we look at Microsoft Entra ID Lifecycle Workflows. Microsoft has recently introduced a new task that revokes a user's refresh token. Consider scenarios…
Unlocking the Power of employeeHireDate in Entra ID Dynamic Groups
Disclaimer: The main structure of this blog post is created by Claude 3.7 Sonnet. Together with Lokka, I figured out all the supported operators by testing all…
Register Yubikeys on behalf of your users with YubiEnroll
In an earlier post, I showed several ways to (bulk) provision Yubikeys (or keys from other vendors) in Microsoft Entra using the provisioning APIs. In this…
How to restrict Device Code Flow in Entra ID
For good reasons, device code flow in Entra ID is getting a lot of attention. Attackers heavily use it to get access to Microsoft 365 accounts and data. Device…
Evilginx loves Temporary Access Passes too
Evilginx is known for capturing user cookies, even if they are secured by MFA methods like SMS, TOTP, push notifications or passwordless phone sign-in. In…
Things you should know before rolling out device-bound passkeys in Microsoft Authenticator App
As passkeys get more traction in Microsoft 365, more and more companies are looking to strengthen their identity posture by enrolling passkeys for their…
Conditional Access risk policies. Don't get fooled!
Microsoft Entra ID Protection and Microsoft Entra Conditional Access work well together. If your organization owns an Entra Premium P2 license, you likely have…
Microsoft Entra ID Governance: Show suggested access packages in My Access
Today's post is about a new feature in Entra ID's Identity Governance: Show suggested access packages in My Access.
Use Requestor information in Entra ID Access Packages as input for Custom Extensions
In a previous blog post, I explained a proof of concept in which we use Entra ID Governance Access Packages to request a Temporary Access Pass on behalf of…
Request Temporary Access Pass on behalf of others via Entra ID Governance Access Package
While looking at this new feature (Request access packages on-behalf-of other users (Preview) - Microsoft Entra ID Governance | Microsoft Learn), an…
Evilginx Mastery Course | What I learned
A couple of years back, I was really struggling to get Evilginx up and running. The main reason was that I had forgotten how to do it by the time I needed an…