You shall not pass(key)! (updated)
In a previous blog post, I briefly touched on all the current caveats involved with passkeys in Entra ID. One of the most raised questions is around the…
Archive
Posts
Security Info Registration. Entra ID's rabbit hole.
This blog post needs a brief introduction. Bear with me.
Dynamic approval in Entra ID access packages using custom extensions
Microsoft Entra ID Governance Entitlement Management supports various static and dynamic approvers for access packages, such as users, groups, managers, and…
Managing PIM-enabled groups with Entra ID Governance Access Packages just got better!
Just a quick heads-up for those working a lot with Entra ID Governance: Access Packages now supports eligible membership and ownership of PIM-enabled groups.…
Poor man’s IGA: Monitor and clean up stale guest accounts
Today, we are dealing with inactive or stale guest users in a tenant. Entra ID Governance has several ways to solve this, but if you had those licenses, you…
KB - We detected that this particular key type has been blocked by your organization
This is a knowledge base item. Hope it will help you someday.
Poor man’s IGA: Generate Temporary Access Pass for joiners
Today, we look at a joiner scenario, where you want to trigger a time-based workflow to send a Temporary Access Pass 7 days before the employee's start date.
Poor man's IGA: Revoke all refresh tokens for user
Today, we look at Microsoft Entra ID Lifecycle Workflows. Microsoft has recently introduced a new task that revokes a user's refresh token. Consider scenarios…
Unlocking the Power of employeeHireDate in Entra ID Dynamic Groups
Disclaimer: The main structure of this blog post is created by Claude 3.7 Sonnet. Together with Lokka, I figured out all the supported operators by testing all…
Register Yubikeys on behalf of your users with YubiEnroll
In an earlier post, I showed several ways to (bulk) provision Yubikeys (or keys from other vendors) in Microsoft Entra using the provisioning APIs. In this…
How to restrict Device Code Flow in Entra ID
For good reasons, device code flow in Entra ID is getting a lot of attention. Attackers heavily use it to get access to Microsoft 365 accounts and data. Device…
Evilginx loves Temporary Access Passes too
Evilginx is known for capturing user cookies, even if they are secured by MFA methods like SMS, TOTP, push notifications or passwordless phone sign-in. In…