Daniel is a UK-based technical architect and Microsoft Security MVP specializing in Microsoft Entra, Intune, and Microsoft Graph, sharing real-world automation and identity management insights from hands-on experience.
62 articles from this blog
Microsoft silently updated four Entra ID built-in roles, affecting permissions for backup, AI, and governance administrators.
Microsoft Entra will allow passwordless users to change passwords without knowing the current one, reducing support calls.
Microsoft retires custom CSS positioning in Entra ID company branding by Oct 2026 to boost phishing resistance.
Microsoft announces retirement of SMS and voice authentication by 2027, pushing passkeys as the default MFA method.
Microsoft's new Entra SOC Identity Responder role allows granular identity threat response with least privilege.
Microsoft retires Custom Controls in Conditional Access, replacing them with External MFA for third-party MFA integration.
Explains why bypassing MFA for office IP addresses creates security risks, especially with guest networks and SNAT.
Microsoft Purview adds native time limits for role group assignments, enabling temporary access from 1 day to 2 years without PIM workarounds.
Clarifies Microsoft Entra's 'One Person, One License' philosophy with new FAQs, explaining that employees with multiple identities need only one license.
Guide to enabling baseline scope settings in Conditional Access for Microsoft Entra ID.
Learn how to automate PIM approvals using custom extensions with REST APIs to improve efficiency.
Guide to restricting guest invitation permissions in Microsoft Entra ID for better security and zero trust compliance.
Microsoft moves Defender for Endpoint EDR updates to Microsoft Update channel, decoupling from monthly Windows cumulative updates.
Microsoft Entra is expanding system-preferred authentication to first-factor login, prioritizing secure methods like passkeys over passwords.
Microsoft introduces a pay-as-you-go storage meter for SharePoint Online overages, offering flexible scaling and integrated billing.
Guide to restoring soft-deleted devices in Microsoft Entra using portal and PowerShell.
Comparison of direct Managed Identity permissions vs. federated identity with App Registration for Graph API access.
Microsoft Entra ID now supports Passkeys in Registration Campaigns, nudging users towards passwordless authentication.
Best practices for managing Global Admin accounts in Microsoft 365, including recommended numbers and PIM usage.
Microsoft Entra ID will enable App Instance Lock by default for new apps starting June 2026, blocking credential changes from foreign tenants.
