We currently use Microsoft's default passkey configuration, allowing both passkey types without attestation. I'm considering whether to create different authentication strengths for various user groups. For highly privileged…
We have an existing enterprise application in Microsoft Entra ID that uses SAML authentication. A newly added user cannot sign in, even though the sign-in logs show that…
We have an existing enterprise application configured for SAML authentication in Entra ID. A newly added user cannot sign in, even though the sign-in logs show that the…
We currently use Microsoft's default passkey configuration, supporting both synced and device-bound passkeys without attestation. I'm trying to work out whether we should create different authentication strengths and…
We've had several near-breaches involving an EvilToken-style attack. A compromised account sends convincing messages to everyone in the victim's address book, often linking to a legitimate-looking SharePoint site.…
We've had several near-breaches involving a phishing technique where a compromised account emails everyone in the victim's address book. The message links to a legitimate SharePoint site, but…
Microsoft's reporting on device-code phishing highlights an awkward security tradeoff: device-code authentication is legitimate, but attackers can abuse it by persuading users to authorize a session on another…
I'm deploying a Conditional Access policy that requires MFA for medium- and high-risk sign-ins, plus password reset and MFA for users identified as high risk. The tenant currently…
I'm deploying a Conditional Access policy for a customer that requires MFA for medium- and high-risk sign-ins, plus password reset and MFA for users with a high user-risk…
We've been investigating device-code phishing attacks where an attacker authenticates through a device-code flow, obtains OAuth tokens, and then registers or joins a rogue device to Entra. The…
Microsoft's recent guidance on device-code phishing highlights an awkward problem: device-code authentication is legitimate, but attackers can abuse the trusted flow by persuading users to authorize a session.…
We're currently piloting Microsoft Global Secure Access in an environment with roughly 400 users and 300 devices. So far, Microsoft 365 traffic routing and the Private Access profile…
Is anyone else having trouble activating Microsoft Entra Privileged Identity Management roles this morning? Our conditional access flow reaches the sign-in step, but activation ends with "We couldn't…
I'm removing the Global Administrator role from my everyday account and creating a separate account for administrative use. I'd like to protect it as strongly as possible, so…
I'm moving the Global Administrator role off my everyday user account and creating a separate account for administrative work. I'd like to secure it as tightly as possible…
We're moving our company-owned iPhones into Intune and deciding whether to keep supporting Apple's native Mail and Calendar apps or require Outlook for email, calendar, and contacts. Since…
I'm planning a Zero Trust security architecture for a relatively simple Microsoft 365 environment. We have a small number of internal users on managed devices, plus guest users…
We're moving our company-owned iPhones into Intune and deciding whether to keep supporting Apple's native Mail and Calendar apps or move everyone to an Outlook-only setup. Since we…
Has anyone experienced macOS Platform SSO working normally for several weeks and then suddenly prompting the user to register again? We use Secure Enclave-based PSSO, and when the…
Has anyone else experienced macOS Platform SSO working normally for several weeks and then suddenly prompting users to register again? We use Secure Enclave, and when the device…