Step-by-step guide to set up OpenWebUI on Docker with Foundry, Entra ID authentication, and Caddy reverse proxy.
Microsoft silently updated four Entra ID built-in roles, affecting permissions for backup, AI, and governance administrators.
Explains why bypassing MFA for office IP addresses creates security risks, especially with guest networks and SNAT.
Guide to cross-tenant Azure authentication using Managed Identity and Federated Identity Credentials, avoiding secrets and the AADSTS700236 error.
Learn how to automate PIM approvals using custom extensions with REST APIs to improve efficiency.
Guide to connecting .NET apps to Azure DocumentDB (MongoDB) using Entra ID Managed Identity instead of passwords.
Microsoft Entra is expanding system-preferred authentication to first-factor login, prioritizing secure methods like passkeys over passwords.
Troubleshooting missing Member attribute in Entra ID users and fixing it with PowerShell.
Analysis of the new AADGraphActivityLogs log source for detecting reconnaissance tooling like ROADtools and AADInternals in Entra ID.
Guide to setting up an Exchange Online shared mailbox for automation agents using certificate-based authentication and Exchange RBAC.
Analysis of bypassing Entra Conditional Access via alternative token broker techniques, focusing on security vulnerabilities.
Explains that new Entra admin roles are not automatically protected by Conditional Access policies, creating a security gap.
Discusses the critical need for secure account recovery workflows when implementing passkeys, highlighting Microsoft Entra's new preview solution.
Explains why being an Azure Storage Account Owner doesn't grant data access and how to assign the correct Storage Data roles.
A technical guide on securing Azure Files with Entra ID Kerberos, focusing on private network access via VPN, Firewall, and Private Endpoints.
Exploring undocumented time-based Conditional Access policies in Microsoft Entra using Graph API and LLM assistance.
Guide to setting up Microsoft Entra Conditional Access policies for the new Account Recovery feature, enhancing security with identity verification.
A guide to deploying Azure Virtual Desktop using Intune for cloud-only users, eliminating on-premises dependencies.
A guide to using Connect-MgGraph PowerShell cmdlet for authenticating and automating Microsoft Graph API access, covering app registration and authentication flows.
A technical guide on manually configuring federated identity service connections in Azure DevOps to maintain control over Azure Entra service principals.
