Entra ID Passkeys in 2026: What Changed and Why to Move Now
Synced passkeys are GA, passkey profiles are live, and passkeys become Entra ID's default sign-in on 1 September 2026. What changed and how to move.
Read article →Synced passkeys are GA, passkey profiles are live, and passkeys become Entra ID's default sign-in on 1 September 2026. What changed and how to move.
Read article →Microsoft-provided SMS and voice MFA retires 1 February 2027. Here is the Entra ID timeline, the September 1 passkey opt-out, and a safe migration plan.
Read article →Entra privileged identity management setup done right: configure JIT admin access, approval workflows, and alerts to eliminate standing privileges.
Read article →Entra ID workload identity federation replaces CI/CD client secrets with short-lived OIDC tokens. Full setup for GitHub Actions and Azure DevOps.
Read article →Conditional access gap analysis: use Microsoft's What-If tool and PowerShell to find unprotected users, apps, and sign-in paths before attackers do.
Read article →Entra Connect 2.6.79.0 shipped security fixes but was recalled — install 2.6.84.0 instead. Same security fixes, plus a FIDO2 wizard sign-in preview.
Read article →Divesting a business unit from Microsoft 365? What the native carve-out tooling covers in 2026, what never moves, and how to run the TSA window.
Read article →Baseline scopes enforcement, auto-enabled passkey profiles, and the 1 September passkey default — a verified Entra ID hardening checklist for 2026.
Read article →Build a production-safe Azure AD conditional access setup: break-glass accounts, MFA baseline policies, report-only rollout, and Maester test coverage.
Read article →