Entra ID Passkeys: Profiles, Synced Keys and a Rollout Plan
Plan your Entra ID passkey rollout: synced passkeys are supported, profiles control attestation and AAGUIDs, and passkeys are now the default sign-in.
Read article →
Topic
22 articles
Security
Security work for the people who configure and defend Microsoft and Azure environments. Posts cover identity hardening in Entra, Conditional Access design and gap analysis, passkeys and break-glass accounts, privileged access with PIM, Zero Trust networking, Defender XDR and Sentinel, and Purview data protection. Threat-focused articles analyse real incidents, such as Teams helpdesk impersonation, ASCII smuggling, service account weaknesses and AI-assisted intrusions, then translate them into controls and checks you can apply the same day. Patch Tuesday triage and emergency-patch posts help you decide what to fix first. Start with Conditional Access Gap Analysis, Entra ID Privileged Identity Management, and Teams Helpdesk Impersonation.
Microsoft Is Retiring SMS and Voice MFA: Your Entra ID Migration Plan
Microsoft-provided SMS and voice MFA retires 1 February 2027. Here is the Entra ID timeline, the September 1 passkey opt-out, and a safe migration plan.
Read article →
Entra ID Privileged Identity Management: Rolling Out Just-in-Time Admin Access
Entra privileged identity management setup done right: configure JIT admin access, approval workflows, and alerts to eliminate standing privileges.
Read article →
Entra ID Workload Identity Federation: Eliminating Secrets in CI/CD Pipelines
Entra ID workload identity federation replaces CI/CD client secrets with short-lived OIDC tokens. Full setup for GitHub Actions and Azure DevOps.
Read article →
Conditional Access Gap Analysis: Finding and Fixing Coverage Holes with What-If
Conditional access gap analysis: use Microsoft's What-If tool and PowerShell to find unprotected users, apps, and sign-in paths before attackers do.
Read article →
Microsoft Sentinel in 2026: Build Your First Analytics Rules and Playbooks
Microsoft Sentinel analytics rules explained: build detection logic, cut alert fatigue, and automate response with playbooks in under an hour.
Read article →
Zero Trust Network Architecture: A Practical Azure Implementation Guide
Zero trust Azure implementation done right: harden identities, microsegment networks, and enforce least-privilege access across your entire Azure estate.
Read article →
Microsoft Entra Connect 2.6.79.0: Apply the Security Fixes Now — Plus FIDO2 Sign-In for the Wizard
Entra Connect 2.6.79.0 shipped security fixes but was recalled — install 2.6.84.0 instead. Same security fixes, plus a FIDO2 wizard sign-in preview.
Read article →
Microsoft Defender XDR in 2026: The Unified Portal, Sentinel Convergence, and the Agentic SOC
Sentinel moves into the Defender portal by 31 March 2027. What merges, what breaks, the RBAC and licensing reality, and a sequenced migration plan.
Read article →
Azure Key Vault: Store and Retrieve Secrets the Right Way
- Azure Key Vault centralizes secret management with enterprise-grade security and access controls
Read article →