Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance, Azure & Entra ID Tiago Carvalho Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance, Azure & Entra ID Tiago Carvalho

Hardening Workload Identities in Microsoft Entra ID - Secrets, Service Principals & Secretless Auth

Most tenants have dozens of app registrations with long-lived secrets, no Conditional Access coverage, and zero monitoring. This article covers the full hardening path: credential inventory via Graph, migration from secrets to certificates to workload identity federation (with a decision table by scenario), Conditional Access for service principals, ID Protection risk detections, governance lifecycle, the March 2026 service-principal-less authentication deadline, common hardening mistakes, an SMB quick-start priority list, and an auditor evidence checklist.

Read More
Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance, Azure & Entra ID Tiago Carvalho Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance, Azure & Entra ID Tiago Carvalho

Your Entra ID Passkeys May Have Changed Automatically: What to Check After the 2026 Migration

Microsoft Entra ID passkey profiles reached GA in 2026, and tenants with FIDO2 already enabled may have been migrated automatically. This article explains what changed, how device-bound and synced passkeys differ, and the key settings to review now.

Read More
Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance Tiago Carvalho Identity, Microsoft 365, Cloud Security, Microsoft Entra ID, Security, Identity Governance, Security & Compliance Tiago Carvalho

Why Traditional MFA Fails: Enforcing Phishing-Resistant Access with Entra ID & Conditional Access

MFA enabled does not equal identity protected. Learn how to design phishing-resistant access using Microsoft Entra ID, Authentication Strengths, and Conditional Access to defend against AiTM and MFA fatigue attacks.

Read More
Microsoft 365, Endpoint Management, Security, Microsoft Intune, Architecture Blueprint, Security Architecture, Microsoft Entra ID, Identity & Access Tiago Carvalho Microsoft 365, Endpoint Management, Security, Microsoft Intune, Architecture Blueprint, Security Architecture, Microsoft Entra ID, Identity & Access Tiago Carvalho

A strategic and visual guide to building a scalable Conditional Access framework aligned with Zero Trust. Learn how to structure layered policies, design naming conventions, and implement predictable, enterprise-grade access controls.

Read More