A guide to implementing Entra ID token protection to secure Azure Virtual Desktop and Windows 365 Cloud PCs from token theft.
A technical guide on implementing end-to-end user authorization for MCP servers using Entra ID, OAuth 2.0, and on-behalf-of flows.
Explains an issue where Azure PIM configuration objects persist after deleting the associated security group, and provides the documented solution.
A guide to implementing cost-effective, 'good enough' security for Azure PaaS applications, covering architecture, Entra ID, WAF, and Managed Identities.
Explains how to use the experimental Bicep extensibility framework to manage Microsoft Graph resources like Entra groups and users via Infrastructure as Code.
Explains how to configure cross-tenant MFA trust and GDAP for secure, convenient access for Cloud Service Providers (CSPs) in Microsoft Entra ID.
How to fix Graph API queries filtering members in Entra groups and administrative units by user extension attributes.
A step-by-step manual for deploying and configuring Microsoft Entra ID Application Proxy to enable secure remote access to on-premises applications.
Microsoft Entra ID's public preview for passkeys marks a major step towards enterprise adoption of passwordless, phishing-resistant authentication.
A technical guide on securing user identity in Azure Entra ID, covering MFA, Conditional Access, break glass accounts, and other security configurations.
Microsoft Authenticator's new number matching feature combats MFA fatigue attacks by requiring users to enter a code during sign-in.
A technical guide on configuring and using Privileged Access Groups in Entra ID (Azure AD) to manage elevated permissions for users and groups.
