Daniel is a UK-based technical architect and Microsoft Security MVP specializing in Microsoft Entra, Intune, and Microsoft Graph, sharing real-world automation and identity management insights from hands-on experience.
62 articles from this blog
Global Admins and external users now have another five months before Microsoft switches off its SMS and voice authentication service. The original ver
An application no longer needs broad access to Microsoft 365 group properties just to build a group picker or check a groups membership. Microsoft jus
Microsoft Outlook adds meeting organiser transfers, allowing users to hand over meetings and recurring series without recreating them.
Microsoft is restricting User.ReadBasic.All in Graph API, removing access to app role assignments and licence details by late 2026.
Only a couple of months ago, Microsoft added passkeys to the registration campaign experience. Now, your Microsoft Entra users who previously missed o
Microsoft may be preparing to let administrators report which external Microsoft 365 tenants their users can access. A 4 September 2026 update to the
Guide to syncing user accounts from Entra ID to Active Directory using Entra Cloud Sync, including setup and attribute mapping.
Microsoft Entra Cloud Sync now supports provisioning users from Entra ID to Active Directory, with setup steps and prerequisites.
Microsoft Graph adds new IdentityDiagnostic permissions, hinting at a future Entra ID diagnostics API for starting and reading diagnostic processes.
Microsoft adds 13 new Graph API permissions for deleting user authentication methods, aiding SOC teams in identity threat response.
Microsoft Entra will allow B2B guest users to register and use passkeys (FIDO2) in the resource tenant, with rollout starting October 2026.
Microsoft quietly expands the Entra Application Developer role with 15 new directory permissions, raising security concerns.
Microsoft expands Entra ID Security Administrator role with identity containment actions, enabling incident-response tasks like disabling users and resetting passwords.
Something that may catch you out today, is that your “All Staff” dynamic group which has likely always works, may no longer contain only staff. Micros
Microsoft retires memberOf dynamic group operator; article warns against using preview features in production due to risks.
Microsoft Entra ID shows licensing overage warnings for Conditional Access, signaling potential enforcement of license compliance.
Microsoft Entra simplifies passwordless MFA registration, allowing passwordless credentials as first MFA and recognizing Windows Hello/macOS SSO as standalone MFA factors.
Microsoft is ending the memberOf rule operator for dynamic groups in Entra, affecting group membership processing. Learn how to audit and replace affected rules.
Learn how to prevent users from registering applications in Microsoft Entra to mitigate security risks.
Learn how to disable group nesting in Microsoft Entra ID using PowerShell and Microsoft Graph API to improve access control clarity.
