Authenticator Lite - Approve Azure MFA prompts with the Outlook app
Microsoft released a new feature where the Outlook mobile app now has some of the Microsoft Authenticator App features onboard. Users can now enroll for Azure…
Archive
Posts
System-preferred multifactor authentication in Azure AD. Don't settle for less.
A new feature has popped up in Azure AD: System-preferred multifactor authentication (MFA). This will allow administrators to enforce the most secure method…
Duplicate Azure Active Directory Conditional Access policies
In this post, we look at managing Conditional Access policies and, in particular, duplicating existing policies. This can be super handy when you:
Mailbox usage reports, Graph API, and Logic Apps. What's not to like?
Exchange Online does a pretty good job when it comes to alerting on mailbox storage. Exchange Online provides three kinds of notifications when a user's…
Break glass accounts and Entra ID Security Defaults
Update 16-06-2026 — FIDO2 Sign-In Failure: AADSTS135016Some users reported being unable to sign in with their FIDO2 security keys, receiving error…
Goodbye legacy SSPR and MFA settings. Hello Authentication Methods Policies!
I've got some exciting news to share today. Microsoft has launched a public preview called "Authentication Methods Policy Convergence." I was part of the…
Synchronize attributes for Lifecycle workflows - Azure AD Connect Sync
Azure AD Lifecycle Workflows can be used to automate the Joiner-Mover-Leaver process for your users. Previously, I wrote about a use case where you can use LCW…
How to keep track of changes on Microsoft Docs & Learn?
When working with cloud services like Microsoft 365 or Azure Active Directory in particular, it's very important to stay on top of new features and/or product…
The road to Microsoft MVP and beyond
Today, a slightly different post. I think it's time to step away from the technical stuff for a moment and tell you more about my experiences in the Microsoft…
Automate issuing Temporary Access Pass for joiners with LifeCycle Workflows
On September 30th, 2022, Pim Jacobs and I did a session on the brand new Lifecycle Workflows feature in Azure AD Identity Governance. During that session, I…
KB - Write requests (excluding DELETE) must contain the Content-Type header declaration.
This is a knowledgebase item. I hope it helps you out someday.
Take control of your guests with the External Identities Policy
Today we take a look at the brand new External Identities Policy in Azure AD. This new policy controls whether external users can leave the guest Azure AD…