Real World Microsoft Security
Entra ID, Intune, and Microsoft 365 security, from someone who actually runs this stuff.
What I’ve learned securing Entra ID, Intune, and M365 in production, written down so it’s useful to someone else.
Latest
-
Federation Still Requires Conditional Access Policies
It seems like every federation conversation I’m part of eventually lands on the same sentence: “We don’t really need Conditional Access, ‘Insert 3rd party IdP here’ handles our MFA.” And…
-
Token Protection for Web Apps First Look and Wackiness
Remember the asterisk back in Part 1? Token Protection earned one in the mitigation table, right next to a note…
-
Agent Identities Are Not Service Principals
Head on over to your audit logs and filter the last 30 days on “Add service principal.” Some of those…
-
Breaking Up with Your IdP: A Practical Guide to De-Federating from Third-Party Identity Providers
It seems like weekly now, I’m being pulled into conversations with customers who want to “break up” with their third-party…
-
Conditional Access Boot Camp
Conditional Access is one of the best tools in your Microsoft environment for securing access. With it, you can control…
Newsletter
Get the next post by email
One email when a new post goes up, and nothing else. Every email has an unsubscribe link.