How to secure passkey registration in Entra ID
Use Conditional Access to secure passkey registration with authentication strength, trusted locations, or compliant devices.
Tag
Conditional Access
A new workaround for authentication strength Conditional Access policy loops: Microsoft Authenticator Credential Registration service principal
A new Conditional Access workaround for Microsoft Authenticator passkey registration loops: exclude the Credential Registration resource.
Prevent AiTM with Microsoft Entra Global Secure Access and Conditional Access
Microsoft Entra Global Secure Access brings a new control to Conditional Access. By installing the Global Secure Access Client on (hybrid) Entra joined devices…
Enforce FIDO2 PIN complexity with Microsoft Entra Conditional Access Authentication Strengths.
As you may or may not know, most FIDO2 security keys can be set up with easy PINs like 1111 or 123456. Just like passwords, users tend to come up with…
Step-up authentication with Defender for Cloud Apps and Authentication Context
In this post, I will show you how you can integrate Azure AD's Authentication Context with Defender for Cloud Apps to require step-up authentication for…
Close the gap. Azure AD Identity Protection & Conditional Access.
This blog is about Azure AD Identity Protection and Conditional Access, and how these two features are working together. This is not my first article on this…
Use Power Automate as your Conditional Access Police Department
Last week, I was working on a new blog for the Secure Score Series regarding global admin and break glass accounts. I came to the point where I was thinking of…
Microsoft Secure Score Series – 06 – Enable policy to block legacy authentication
Today, most compromising sign-in attempts come from legacy authentication. Older office clients such as Office 2010 don’t support modern authentication and use…
Require trusted location for MFA and SSPR registration
This article shows how you can block MFA and SSPR registrations from untrusted locations using Azure AD Conditional Acces.