Sign in

Merill Fernando 💚

@merill.net
6.2K followers 4.4K following 3.8K posts

Product Manager @microsoft | Creator of bluesky.ms • cmd.ms • idPowerToys.merill.net • Graph X-Ray • 🇦🇺 • 🇱🇰 • Posts my own youtube.com/@merillx Sign up to my newsletter entra.news

PostsRepliesMedia
Reposted by Merill Fernando 💚
Tim Cappalli @timcappalli.me · 29/09/2026
This is HUGE. Microsoft 1P apps now use a system browser when authenticating against a 3P IdP (such as Okta or Auth0), allowing #passkeys to be used for sign in. This is a massive step towards finally eliminating phishable authentication for workforce.
0105
Merill Fernando 💚 @merill.net · 29/09/2026
👋 Check out this new Microsoft Entra blog post 👇 Sign in to Microsoft apps with passkeys from external identity providers techcommunity.microsoft.com/t5/microsoft...
techcommunity.microsoft.com
Sign in to Microsoft apps with passkeys from external identity providers
Enable external identity provider passkeys, browser single sign-on, and modern web authentication for brokered Microsoft app sign-ins on Android, iOS, and...
021
Merill Fernando 💚 @merill.net · 28/09/2026
Cheers tx. That's good feedback. Thanks for letting me know. This was just an experiment to try and keep things fresh.
010
Merill Fernando 💚 @merill.net · 28/09/2026
Many of you have asked how to support my open-source work as an individual. You can now sponsor me on GitHub, one-off or monthly: github.com/sponsors/... 🙏
github.com
Sponsor @merill on GitHub Sponsors
I build free tools for everyone who runs Microsoft Entra and Microsoft 365, including Maester, Graph X-Ray, cmd.ms and Graph Permissions Explorer. I'm independent, with no investors, so sponsor...
000
Merill Fernando 💚 @merill.net · 28/09/2026
$99/month or $1,188/year, on Azure Marketplace, or with an annual quote. Thank you to the 70+ founding supporters and customers who backed this before it was finished 🙏
maester.cloud
Pricing | Maester Cloud
Deploy Maester Cloud into your own Azure subscription for $99 a month or $1,188 a year. Your subscription also funds keeping the open-source Maester core free for everyone.
100
Merill Fernando 💚 @merill.net · 28/09/2026
Self-hosted Maester Cloud is ready 🔥 You can now buy it and deploy it into your own Azure subscription with guided setup. → Scheduled Maester runs with the built-in runner → Drift tracking, test by test → Email reports and drift alerts from your own mailbox
140
Merill Fernando 💚 @merill.net · 28/09/2026
This week's entra.news is out!
121
Reposted by Merill Fernando 💚
Faav @faav.net · 25/09/2026
How I Could've Accessed 17 Trillion Microsoft Records blog.faav.net/how-i-couldv... :)
blog.faav.net
How I Could’ve Accessed 17 Trillion Microsoft Records
How one unchecked login token put 17 trillion rows in a Microsoft internal analytics service within reach.
184
Merill Fernando 💚 @merill.net · 25/09/2026
Attackers don't care about your politics. They just want the click.
070
Merill Fernando 💚 @merill.net · 25/09/2026
Folks, phishers have figured out rage bait. Got this today from "SendGrid HR". They're adding a trans youth message to my email footer this month. Don't want it? Just click the button to remove it. Sender is noreply@billkill.no Rage is the new urgency.
192
Merill Fernando 💚 @merill.net · 23/09/2026
1267
Merill Fernando 💚 @merill.net · 22/09/2026
👋 Check out this new Microsoft Entra blog post 👇 Prepare your tenant estate for AI: Join our upcoming webinars techcommunity.microsoft.com/t5/microsoft...
techcommunity.microsoft.com
Prepare your tenant estate for AI: Join our upcoming webinars
Discover how to gain visibility, maintain consistent configurations, and reduce risk across every tenant in your organization.
020
Merill Fernando 💚 @merill.net · 19/09/2026
👋 Check out this new Microsoft Entra blog post 👇 Public preview of self-service onboarding for new Microsoft Entra App Gallery applications techcommunity.microsoft.com/t5/microsoft...
techcommunity.microsoft.com
Public preview of self-service onboarding for new Microsoft Entra App Gallery applications
Learn how publishers can validate SSO and provisioning, resolve issues earlier, and manage App Gallery submissions from start to finish.
040
Merill Fernando 💚 @merill.net · 18/09/2026
👋 Check out this new Microsoft Entra blog post 👇 Replace VPN access with identity-driven security techcommunity.microsoft.com/t5/microsoft...
techcommunity.microsoft.com
Replace VPN access with identity-driven security
Use Microsoft Entra Private Access to move from broad VPN access to per-app connectivity, phased rollout, and Zero Trust controls.
031
Merill Fernando 💚 @merill.net · 17/09/2026
Developers wouldn't ship without tests. Identity teams ship changes to a 30-year-old directory every single day with nothing but a change ticket and hope. 269 checks. Read-only. Runs from your workstation. There's no good reason not to have a baseline for AD 🎙️ entra.chat
000
Merill Fernando 💚 @merill.net · 15/09/2026
👋 Check out this new Microsoft Entra blog post 👇 Simplify Employee Identity Lifecycle with HiBob and Microsoft Entra techcommunity.microsoft.com/t5/microsoft...
techcommunity.microsoft.com
Simplify Employee Identity Lifecycle with HiBob and Microsoft Entra | Microsoft Community Hub
Use Microsoft Entra to govern hybrid identities from HiBob while moving to the cloud at your own pace.
010
Merill Fernando 💚 @merill.net · 15/09/2026
Entra News #166 is out!
040
Merill Fernando 💚 @merill.net · 06/09/2026
Issue #165 of Entra News is out and its a bumper issue. Get it at entra.news/p/entra-n...
030
Reposted by Merill Fernando 💚
Frank Lesniak @franklesniak.com · 30/08/2026
I'm Nashville-bound next week for the Hybrid Identity Protection Conference! I selected sessions on defending AD, retiring NTLM & securing Entra (@dotdot.horse, @ericonidentity.com, @merill.net, @samerde.day3bits.com) to help me keep my clients secure. Attending? Say hi! #HIPConf
Conference agenda webpage with tabs for Tuesday, September 8, 2026, Wednesday, September 9, 2026, and Thursday, September 10, 2026; Wednesday is selected. The schedule lists Breakfast 7:30 AM–8:45 AM, Opening Remarks: Mickey Bresman, Why Cyber Conflict Is a Human Problem, LETs KILL NTLM, Breaks, Attackers Aren’t Wizards: Turning Red Team Lore into Real Controls, Mission-Critical Conditional Access at Scale, Lunch, AD Experts Panel, Let’s Kill NTLM (Vol. 2): The Kerberos Connection, Abusing the Holes in Conditional Access: Modern Attack Paths and How to Close Them, and Evening Event 6:30 PM–10:00 PM.Conference agenda page with tabs for Tuesday, September 8, 2026, Wednesday, September 9, 2026, and selected Thursday, September 10, 2026. The Thursday schedule lists sessions such as Breakfast, Human Resilience in the Age of AI: Building Proactive Cyber Defense, Your Agents Don’t Have Passwords: Governing Non-Human and Agentic AI Identities, Lunch, and Resilience Under Fire: A CISO’s Journey Through Crisis, Health Challenges, and High-Stakes Defense, each with times and magnifying glass icons on the right.
041
Reposted by Merill Fernando 💚
Darren 'Doc' Robinson [MVP] @darrenjrobinson.com · 02/09/2026
New MCP Server: @merill.net Joanne Hayek have resumed their fantastic weekly Microsoft AI Newsletter. I've updated and published the associated MCP Server. Check it out and add it to your AI Knowledge Agents blog.darrenjrobinson.com/microsoft-ai...
blog.darrenjrobinson.com
Microsoft AI Roundup MCP Server - darrenjrobinson - Bespoke Identity and Access Management Solutions
An MCP server that turns Merill & Joshua's weekly Microsoft AI Roundup newsletter into a searchable knowledge base
022
Merill Fernando 💚 @merill.net · 03/09/2026
Sorry no...
000
Merill Fernando 💚 @merill.net · 02/09/2026
👋 Check out this new Microsoft Entra blog post 👇 What’s new in Microsoft Entra: September 2026 techcommunity.microsoft.com/t5/microsoft...
techcommunity.microsoft.com
What’s new in Microsoft Entra: September 2026
Learn about generally available and public preview identity and network access capabilities released in the past 30 days.
030
Merill Fernando 💚 @merill.net · 01/09/2026
We just sent out this week's Microsoft AI news roundup. Get it at msai.ms Subscribe today!
021
Merill Fernando 💚 @merill.net · 31/08/2026
General Motors is ~200,000 people into its passkey rollout. Andrew Cameron on Windows Hello at scale, factory floors, and the guest accounts that make it hard. Watch / Listen to the full episode on Entra Chat. entra.news/p/how-gen...
010
Merill Fernando 💚 @merill.net · 30/08/2026
We just sent out this week's Entra newsletter - Issue #164 Get it at entra.news
030
Merill Fernando 💚 @merill.net · 28/08/2026
Cheers!
010
Merill Fernando 💚 @merill.net · 28/08/2026
👋 Folks after year long hiatus the community powered database of aka•ms is back!! Bookmark it 👇 akams.fyi PS. I made some updates to the site, including a much simpler experience to contribute aka•ms links to the database.
152
Merill Fernando 💚 @merill.net · 28/08/2026
👋 Folks, I’ll be joining Sam and Mike to show how you can go beyond security baselines and build custom security tests with Maester across Entra ID, on-prem AD, and your entire hybrid estate. 📅 September 10 at 11:00 AM Hope to see you there!
020
Merill Fernando 💚 @merill.net · 27/08/2026
This feature was public preview and never went to GA. When a feature is GA that typically provide two years of notice
100
Merill Fernando 💚 @merill.net · 27/08/2026
👋 PSA - M365 admins: quick heads up myaccount.microsoft.com 👇 myaccount.cloud.micr...
030
Merill Fernando 💚 @merill.net · 27/08/2026
"If it ain't broke, don't fix it" is why AD groups still run licensing in a lot of Entra tenants. On 3 November, part of that setup stops working. The clip explains the habit. The episode covers the fix. Gregor Reimling, René Wasel + Eric Woodruff. 🎧 entra.chat
141
Merill Fernando 💚 @merill.net · 26/08/2026
👋 Check out this new Microsoft Entra blog post 👇 Instant Revocation of Service Principal Bearer Tokens with CAE techcommunity.microsoft.com/t5/microsoft...
techcommunity.microsoft.com
Instant Revocation of Service Principal Bearer Tokens with CAE | Microsoft Community Hub
This blog post describes how to instantly revoke Entra service principal bearer tokens with continuous access evaluation, even before their lifetime has...
042
Merill Fernando 💚 @merill.net · 26/08/2026
There's a link at the end of the newsletter to submit content. Please let me know if there are posts and blogs I'm missing. Thanks!
010
Merill Fernando 💚 @merill.net · 26/08/2026
Folks, I just re-started MSAI weekly, your weekly round up of the Microsoft AI updates worth knowing. Including Microsoft 365 Copilot, GitHub Copilot, Azure AI Foundry, Copilot Studio, Security Copilot, Microsoft Fabric, Agent 365, and more. Check it out at msai.ms and subscribe today.
121
Merill Fernando 💚 @merill.net · 22/08/2026
I just sent out issue #163 of the weekly Entra News. Get it today and subscribe if you haven't already! entra.news
050
Merill Fernando 💚 @merill.net · 21/08/2026
Today I accidentally wandered into the wrong neighbourhood on X. PS. I’m loving it 😂
150
Merill Fernando 💚 @merill.net · 18/08/2026
Cheers Ewald It's the small stuff and it's pretty easy to add with AI
001
Merill Fernando 💚 @merill.net · 18/08/2026
Folks, I'm excited to announce something for all the die hard Intune fans. Check out daily.intune.admin.news today! + bookmark it. BONUS: Sign up for the email newsletter to get the updates delivered straight to you inbox daily.
181
Merill Fernando 💚 @merill.net · 17/08/2026
Cheers!
000
Merill Fernando 💚 @merill.net · 17/08/2026
He copied a value out of the Windows Event Log. Pasted it into his special browser. And he was signed into Microsoft Entra as the user who had just authenticated. No password. No phishing link. No stolen private key. @MGrafnetter's Black Hat USA 2026 research Watch at entra.chat
070
Merill Fernando 💚 @merill.net · 15/08/2026
Have you read this weeks Entra.News ?
151
Merill Fernando 💚 @merill.net · 14/08/2026
This is a good write up, feel free to submit it for this week's entry
110
Merill Fernando 💚 @merill.net · 14/08/2026
Did you know your Entra dynamic groups could be granting AI agents access to apps and services without you realizing it? You might even be assigning them licenses and running out of licenses for your human users. Find out how to fix at merill.net/blog
An agent's user account is a subtype of user identity within Microsoft Entra. An agent's user account is evaluated by user-based membership rules and can be included in a dynamic user group when it satisfies the rule.

By default, an agent's user account isn't distinguished from other user identities. To exclude these accounts, include a condition in the membership rule. You can also create rules that include only agents' user accounts or target accounts associated with a specific agent identity blueprint. Agent identities, which are service principals, aren't supported as members of dynamic membership groups.
020
Merill Fernando 💚 @merill.net · 14/08/2026
👋 Check out this new Microsoft Entra blog post 👇 Why Active Directory alone is no longer enough techcommunity.microsoft.com/t5/microsoft...
techcommunity.microsoft.com
Why Active Directory alone is no longer enough | Microsoft Community Hub
Five signs your organization has outgrown Active Directory, and four practical steps to reduce dependency and modernize identity.
052
Reposted by Merill Fernando 💚
Darren 'Doc' Robinson [MVP] @darrenjrobinson.com · 12/08/2026
On Entra Podcast Jai Maharaj describes to @merill.net an Australian customers concerns that employer-issued passkey-enrolled laptops were being handed to workers overseas to do the job for them. Phishing-resistant MFA didn't stop the human workaround. www.youtube.com/watch?v=MCFz...
youtube.com
SMS MFA Ends in 2027: Your Microsoft Entra Passkey Migration Plan
YouTube video by Merill Fernando
112
Merill Fernando 💚 @merill.net · 13/08/2026
Yeah they are really good at using git directly. I wonder if I should make a skill
100
Merill Fernando 💚 @merill.net · 12/08/2026
👋 Check out this new Microsoft Entra blog post 👇 How to enforce Zero Trust across every resource techcommunity.microsoft.com/t5/microsoft...
techcommunity.microsoft.com
How to enforce Zero Trust across every resource
Discover the latest Microsoft Entra Internet Access and Private Access innovations to secure AI interactions, local agents, web traffic, and private...
041
Merill Fernando 💚 @merill.net · 11/08/2026
Now I can find and fix vulnerabilities in my own code. I'm glad to see OpenAI making these model's available to help make our app's secure. FYI For those who want to get access to Daybreak Blue 👇 openai.com/index/exp...
030
Merill Fernando 💚 @merill.net · 11/08/2026
👋 Check out this new Microsoft Entra blog post 👇 What's New in Microsoft Entra: August 2026 techcommunity.microsoft.com/t5/microsoft...
techcommunity.microsoft.com
What's New in Microsoft Entra: August 2026
Learn about generally available and public preview identity and network access capabilities released in the past 30 days.
031
Merill Fernando 💚 @merill.net · 11/08/2026
Microsoft-managed SMS and voice MFA retires in 2027. In Episode 70 of Entra.Chat, Jai Maharaj shares a practical path from SMS to passkeys covering profiles, rollout, Conditional Access, secure onboarding and account recovery. Watch or listen: entra.chat
070