Mailbox usage reports, Graph API, and Logic Apps. What's not to like?
Exchange Online does a pretty good job when it comes to alerting on mailbox storage. Exchange Online provides three kinds of notifications when a user's…
Archive
Posts
Break glass accounts and Entra ID Security Defaults
Update 16-06-2026 — FIDO2 Sign-In Failure: AADSTS135016Some users reported being unable to sign in with their FIDO2 security keys, receiving error…
Goodbye legacy SSPR and MFA settings. Hello Authentication Methods Policies!
I've got some exciting news to share today. Microsoft has launched a public preview called "Authentication Methods Policy Convergence." I was part of the…
Synchronize attributes for Lifecycle workflows - Azure AD Connect Sync
Azure AD Lifecycle Workflows can be used to automate the Joiner-Mover-Leaver process for your users. Previously, I wrote about a use case where you can use LCW…
How to keep track of changes on Microsoft Docs & Learn?
When working with cloud services like Microsoft 365 or Azure Active Directory in particular, it's very important to stay on top of new features and/or product…
The road to Microsoft MVP and beyond
Today, a slightly different post. I think it's time to step away from the technical stuff for a moment and tell you more about my experiences in the Microsoft…
Automate issuing Temporary Access Pass for joiners with LifeCycle Workflows
On September 30th, 2022, Pim Jacobs and I did a session on the brand new Lifecycle Workflows feature in Azure AD Identity Governance. During that session, I…
KB - Write requests (excluding DELETE) must contain the Content-Type header declaration.
This is a knowledgebase item. I hope it helps you out someday.
Take control of your guests with the External Identities Policy
Today we take a look at the brand new External Identities Policy in Azure AD. This new policy controls whether external users can leave the guest Azure AD…
Block users from viewing their BitLocker keys
This post is mainly focused on a new tenant setting, where you can prevent your end-users from viewing their Bitlocker keys. By design, your users can see…
How to set up Evilginx to phish Office 365 credentials
This post is based on Evilginx 2 and still works, as I forked the old repository to my personal Github, and did some tweaks to make it work. I recently created…
How to deal with orphaned objects in Azure AD (Connect)
We have done hybrid identity for a couple of years now, and it looks like the vast majority is not going to change that soon. Over the past years, we had…