Build the Microsoft 365 Outage Runbook You Didn’t Have
A three-day Microsoft 365 authentication outage exposed break-glass gaps everywhere. Build the runbook that keeps admins working when Entra can't answer.
Read article →
Tag
Tag: Identity
12 articles
Teams Helpdesk Impersonation: When the Attack Rides a Trusted Workflow
Teams helpdesk impersonation turns one approved remote session into domain access. The kill chain, KQL hunting queries, and the settings that stop it.
Read article →
Entra ID Passkeys in 2026: What Changed and Why to Move Now
Synced passkeys are GA, passkey profiles are live, and passkeys become Entra ID's default sign-in on 1 September 2026. What changed and how to move.
Read article →
Microsoft Is Retiring SMS and Voice MFA: Your Entra ID Migration Plan
Microsoft-provided SMS and voice MFA retires 1 February 2027. Here is the Entra ID timeline, the September 1 passkey opt-out, and a safe migration plan.
Read article →
Securing Azure OpenAI for the Enterprise: Private Endpoints, Entra ID Auth, and Content Filtering
Azure OpenAI private endpoint security done right: lock down deployments with Private Link, Entra ID auth, and content filtering before production.
Read article →
Entra ID Privileged Identity Management: Rolling Out Just-in-Time Admin Access
Entra privileged identity management setup done right: configure JIT admin access, approval workflows, and alerts to eliminate standing privileges.
Read article →
Conditional Access Gap Analysis: Finding and Fixing Coverage Holes with What-If
Conditional access gap analysis: use Microsoft's What-If tool and PowerShell to find unprotected users, apps, and sign-in paths before attackers do.
Read article →
GitHub Actions OIDC to Azure: Passwordless Deployments Done Right
GitHub Actions OIDC with Azure eliminates stored secrets for good. Set up passwordless deployments with Workload Identity Federation in under 30 minutes.
Read article →
Microsoft Entra Connect 2.6.79.0: Apply the Security Fixes Now — Plus FIDO2 Sign-In for the Wizard
Entra Connect 2.6.79.0 shipped security fixes but was recalled — install 2.6.84.0 instead. Same security fixes, plus a FIDO2 wizard sign-in preview.
Read article →
Microsoft Entra Tenant Security Hardening: The 2026 Checklist
Baseline scopes enforcement, auto-enabled passkey profiles, and the 1 September passkey default — a verified Entra ID hardening checklist for 2026.
Read article →