Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance, Azure & Entra ID Tiago Carvalho Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance, Azure & Entra ID Tiago Carvalho

Conditional Access foundations: break-glass accounts, exclusion groups, and the logging you want before any policy

Before deploying a single Conditional Access policy, three things have to be in place: two break-glass accounts with FIDO2 keys, a clean exclusion group pattern, and sign-in logs wired to alerts. Part 2 of the series — the foundations that stop a misconfigured policy from becoming a business-hours incident.

Read More
Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance, Azure & Entra ID Tiago Carvalho Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance, Azure & Entra ID Tiago Carvalho

Your Entra ID Passkeys May Have Changed Automatically: What to Check After the 2026 Migration

Microsoft Entra ID passkey profiles reached GA in 2026, and tenants with FIDO2 already enabled may have been migrated automatically. This article explains what changed, how device-bound and synced passkeys differ, and the key settings to review now.

Read More
Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance Tiago Carvalho Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance Tiago Carvalho

Why Traditional MFA Fails: Enforcing Phishing-Resistant Access with Entra ID & Conditional Access

MFA enabled does not equal identity protected. Learn how to design phishing-resistant access using Microsoft Entra ID, Authentication Strengths, and Conditional Access to defend against AiTM and MFA fatigue attacks.

Read More