Back in February I wrote about how to onboard passkeys safely with Temporary Access Pass, and in Passkeys enabled ≠ phishing-resistant I wrote about tightening Conditional Access afterwards. But I …

If you have onboarded anyone to passkeys in Entra, you know the awkward part. Before a user can register a passkey, they need an MFA method already. So either you hand them a Temporary Access Pass,…

Welcome back! In part 1 I went through everything Microsoft dropped on us in July. If you skipped it, go read that one first, because a couple of the things below are the second half of stories tha…

YouTube video by CNN

My last post was a long one, and long posts have a way of leaving something behind. This is the bit that kept nagging at me afterwards, plus one practical thing I want to spell out properly rather …

There is an unwritten rule in this industry. The moment you finally close the laptop, put the phone in a drawer and decide that for three weeks you are going to be a person instead of an identity a…

YouTube video by Kyle Hill

So this will be a little different than my normal blog posts. Every year around this time Microsoft’s fiscal year rolls over, and every year it drags a pile of changes along with it. Most of …

Few things ruin a migration weekend faster than logging into the target tenant and finding two accounts of every user. 😱 One is the account you carefully migrated, the other is a duplicate that syn…

It’s time for another I.D.E.A., and this time I am focusing on one of my true callings in life: MFA for everyone. The MFA reporting that comes natively in your tenant is honestly sub-par, so …

A few weeks ago I wrote about passkey onboarding in Entra, and at the end of that post I made a promise: “Once users have onboarded with passkeys, the real work begins.” This is that fo…

It’s time for another I.D.E.A., and this one might be the most immediately useful one yet, especially if you’re a consultant hopping between tenants, or a SharePoint admin who just discovered that …

It’s been a while since my last blog post and I’m sorry about that, but now we are together again, and what a reunion this will be 🥳 Passkeys for Entra, saved directly in the Windows He…

YouTube video by MS NOW

📢 THIS is a feature I've been (impatiently) waiting for!! 🫶🫶 Take that #passkey and store it directly on your Windows device, no enrollment into WHfB needed! 📵 No mobile device or app needed, just u...

Passkeys are no longer something you can postpone or treat as a future project. Microsoft has already put it on the public roadmap that passkeys will be automatically enabled for all tenants in Mar…

The Supreme Court on Friday invalidated most of President Donald Trump's tariffs, a cornerstone of his economic policy in his second term.

It’s finally time for another I.D.E.A. here at agderinthe.cloud, following up on the first I.D.E.A. which hopefully helped you get your break-glass accounts under control. As you may remember…

As you all should know by now, I’m not particularly impressed by the state of data governance and information security I see out there. In fact, “appalled” is usually closer to th…

Introducing I.D.E.A. — Identity Engineering Artifacts 🥳Happy New Year everyone!🥳 With 2026 here, I’m excited to introduce something new: I.D.E.A. (Identity Engineering Artifacts) I spend quite some…

In Part 1 we looked at how enabling synced passkeys in Entra immediately enables support for iCloud Keychain and Google Password Manager in addition to Microsoft Authenticator mobile app. We also t…

If you’ve read my earlier posts regarding passkeys, you know that Entra Passkeys was my number 1 anticipated feature in 2024, even more than Copilot for M365. It was launched in public previe…

December 1st 2023 marked the very first post on AgderInThe.Cloud, and somehow two full years have already passed. What started as a small idea has grown into a shared space for knowledge, experienc…

A few months after the scramble over Authentication methods in Entra, we yet again face a deadline that actually matters if you care about keeping things secure. This time it is your risk policies …

In part 1 we talk about the “why” of geo filters in Entra, and in part 2 we covered the “how” of building the foundation. All of this with Zero Trust in mind, and focusing on reducing t…

So in part 1 I talked about the “why” of geo filter. Now let’s get a bit more technical and talk about the “how”. The foundation So first of all, I will explain briefl…

After a hectic few weeks and the NIC conference now behind me, it’s time to get back to blogging! 🥳 This will be the first part of a small blog series where I want to talk more in detail abou…

Oslo's fleet of electric buses, imported from China, is facing a significant security challenge due to a software flaw that may allow manufacturers or unauthorized individuals to seize control. Ruter,...

In my earlier post, I called Restricted Administrative Units (RAU) the “real star of the show.” Administrative Units (AUs) scope directory objects like users, groups and clients. Restri…

 

What’s a Device Code? When you want to log in and authenticate to Entra ID, you may not always have the same input capabilities as you have on your computer. This can be devices without keybo…