A guide to implementing Zero Trust security principles within Microsoft Azure, covering identity management, network segmentation, and continuous monitoring.
Explores the challenges of delegating authority to AI agents due to fragmented user identities and ungoverned authorization systems in enterprises.
Analyzes the debate on using a Service Principal with Global Admin role as an emergency 'break-glass' account in Microsoft Entra ID.
Microsoft introduces linkable identifiers in Entra ID logs, a major update for threat hunters to track authentication activities.
Explains security risks and attack scenarios for Managed Identities using Federated Credentials in Azure, focusing on privilege requirements and abuse prevention.
Microsoft announces general availability of its Entra Suite, a comprehensive set of identity and network access security solutions for Zero Trust environments.
A step-by-step manual for deploying and configuring Microsoft Entra ID Application Proxy to enable secure remote access to on-premises applications.
Microsoft Entra ID's new multitenant organization feature enables collaboration across multiple Azure tenants, improving user discovery and Teams integration.
A technical guide on securing user identity in Azure Entra ID, covering MFA, Conditional Access, break glass accounts, and other security configurations.
Microsoft is auto-rolling out managed Conditional Access policies to eligible Entra ID tenants to enforce MFA and improve security.
A technical guide on managing and monitoring Microsoft Entra Workload Identities, focusing on lifecycle management and security analysis.
Introduction to Microsoft Entra Workload ID, covering its features, premium capabilities, and common deployment scenarios for managing non-human identities.
Explains key differences, security considerations, and best practices for Azure AD multi-tenant versus single-tenant applications for admins and developers.
Explores a multi-tenancy security design pattern: external authentication with local authorization, using IDP tokens and SAGA for signup.
A technical guide on implementing multi-tenancy in Keycloak using a single realm and client, focusing on user attributes and client scopes.
A list of command-line shortcuts (aka.ms URLs) for quickly accessing various Azure AD and Identity management pages in the Microsoft portal.
A PowerShell script to identify and remove stale Azure AD role assignments where the associated identity no longer exists, helping clean up access control lists.
Using KQL queries to analyze Azure AD logs for better tenant management, covering users, service principals, and security.
Exploring Azure AD B2C's 'Seamless Migration' feature for moving user identities to the cloud with minimal friction.
A critical analysis of SAML security, arguing its design is inherently insecure due to malleable signature computation, with examples of real-world vulnerabilities.
