Identity first
Identity architecture, Conditional Access, MFA, PIM and everything Microsoft Entra ID — the control plane of Microsoft 365 security.
16 field guides
A practical process to export, diff, review and roll back Conditional Access policies using Graph, audit logs, report-only mode and Entra Backup.
4 August 2026 · 24 min read
Entra ID Protection legacy risk policies retire 1 October 2026, no automatic migration. Rebuild them in Conditional Access: steps, gotchas, free playbook PDF.
15 July 2026 · 16 min read
Microsoft Entra Authentication Strengths and phishing-resistant MFA migration guide for 2026. Built-in strengths, TAP bootstrap, rollout traps, validation checklist.
29 May 2026 · 11 min read
Practical 2026 guide to Microsoft Entra Token Protection: compatibility surface, configuration traps, report-only rollout, and sign-in log status codes.
28 May 2026 · 12 min read
Audit and harden app registrations, service principals, and workload identities in Microsoft Entra ID. Credential hygiene, CA for workloads, federation, and the March 2026 deadline.
20 April 2026 · 25 min read
The full Report-only rollout cadence for the Conditional Access baseline — What If tool, review ritual, KQL triage set, templates and troubleshooting patterns.
16 April 2026 · 23 min read
The eight baseline Conditional Access policies for SMB Microsoft 365 tenants — UI path, include/exclude, grant/session trade-offs, false positives and rollback.
16 April 2026 · 26 min read
Two break-glass accounts, exclusion groups done right, and sign-in logs wired to alerts — the foundations to deploy before any Conditional Access policy.
16 April 2026 · 12 min read
Opinionated 2026 Conditional Access baseline for SMB Microsoft 365 tenants — 8 policies (core + extended), report-only rollout, break-glass, and SMB gotchas.
16 April 2026 · 13 min read
Microsoft Entra ID passkey profiles reached GA in 2026 and some tenants were migrated automatically. Learn what changed, how synced and device-bound passkeys differ, and what to review now.
31 March 2026 · 11 min read
Traditional MFA can be bypassed by AiTM phishing and MFA fatigue. Learn how to enforce phishing-resistant MFA using Entra ID and Conditional Access.
17 February 2026 · 6 min read
A comprehensive guide to deploying passwordless authentication in Microsoft Entra. Learn how to enable Microsoft Authenticator, configure number matching, create secure Conditional Access policies, and transition your organization to a safer, phishing-resistant, password-free environment.
3 December 2025 · 7 min read
A scalable Conditional Access framework for Zero Trust. Learn how to design layered policies, naming conventions, personas, and enterprise access controls.
27 November 2025 · 5 min read
Learn how to automatically block high-risk sign-ins using Microsoft Entra ID Protection and Conditional Access. A step-by-step Zero Trust guide for IT admins to secure identities with real-time risk signals and automated threat prevention.
24 November 2025 · 5 min read
A practical, step-by-step guide to configuring Microsoft Entra Privileged Identity Management (PIM) for secure, Just-in-Time privileged access. Learn how to set up activation policies, enforce MFA, require approvals, assign eligible roles, and apply Zero Trust best practices.
15 November 2025 · 5 min read
Learn how Microsoft Entra ID’s new Source of Authority (SOA) Conversion lets organizations modernize identity management securely moving users and groups to the cloud while staying compatible with on-prem AD
10 November 2025 · 3 min read