Temporary exclusions for Conditional Access using PIM for Groups
Conditional Access include and exclude groups cannot be messed with. As we have seen in a previous blog post, this will impact your security posture. But what…
Archive
Posts
Prevent Conditional Access bypass with Restricted Management Administrative Units in Entra ID
Bypassing Conditional Access is easy. That's because most Conditional Access policies rely on Entra ID Security Groups. Since Entra ID is very "flat" by…
Entra ID Dynamic Groups - Direct reports of a manager
Here's a quick tip that I discovered only recently. A nice, somehow hidden feature of Entra ID dynamic groups is the possibility of creating a dynamic group…
Get started with passkeys in Microsoft 365
It's here! A long-awaited feature in Microsoft 365 is finally there. Now, in public preview, organizations can add another phishing-resistant credential to…
How to simulate risk in Microsoft Entra ID Protection
Entra ID protection is an excellent feature amongst the other services in the Entra Premium P2 license SKU. Microsoft Entra ID Protection detects…
Microsoft 365 end-user notifications for changes in authentication methods
When moving away from traditional and weak authentication methods like passwords to stronger ones like Authenticator App and passkeys, it's essential to keep…
Viewing changes to Conditional Access policies just became easier!
Today, a quick tip for all Entra admins out there. Conditional Access policies can be subject to change. When a policy is changed, its not very easy to see…
A Thread on Frosty Fiascos: Delving into the Microsoft Midnight Blizzard Hack
This post is all about the hack on Microsoft by Midnight Blizzard (NOBELIUM, Cozy Bear, APT29)A lot has been said already, and this event has many angles. This…
Prevent AiTM with Microsoft Entra Global Secure Access and Conditional Access
Microsoft Entra Global Secure Access brings a new control to Conditional Access. By installing the Global Secure Access Client on (hybrid) Entra joined devices…
Evilginx resources for Microsoft 365
Okay, let's start with a disclaimer. This post is created for educational purposes and mainly focuses on red and blue teamers to protect their Microsoft 365…
A love story about Role Based Access Control for Applications in Exchange Online, Managed Identities, Entra ID Admin Units, and Graph API
I've learned something new today. Hear me out.
Prepare for passkeys in Entra ID!
Only a few months until Microsoft Entra ID will support device-bound passkeys stored on computers and mobile devices as an authentication method in preview, in…