Identity

19 articles

• Autopilot Hybrid Entra Join via Entra Kerberos (Preview): The Fix We've Been Waiting For? 2026-03-21

  A complete guide to the new Entra Kerberos based Hybrid Join. Is it enough to save Hybrid Autopilot, or should we all just go Cloud Native?

• Passkeys and the Personal Phone Problem – An MFA Update for 2026 2026-01-10

  An update on MFA in 2026: Microsoft's mandatory MFA enforcement, passkey types (synced vs device-bound), addressing personal phone resistance, and self-enrollment capabilities.

• ConsentFix - The Quickfix 2026-01-08

  How to protect your tenant from the ConsentFix OAuth attack by pre-creating and locking down service principals for vulnerable Microsoft first-party apps using PowerShell.

• Unlocking Self-Service Account Recovery (SSAR) in Microsoft Entra 2025-12-30

  A step-by-step guide to configuring Self-Service Account Recovery (SSAR) in Microsoft Entra ID, enabling users to regain access through government ID verification and biometric liveness checks.

• 2 for 1 - Mail Enable Unlicensed Admin Accounts - 2024 Edition 2024-02-02

  How to save on Exchange Online licensing for admin accounts by using plus addressing or distribution list redirection to receive admin mail without purchasing additional licenses.

• Simplify Windows Hello for Business SSO with Cloud Kerberos Trust - Part 1 2023-03-04

  Part 1 of a trilogy exploring Cloud Kerberos Trust for Windows Hello for Business - covering concepts, trust model pain points, and why Cloud Kerberos Trust is the future of SSO to on-premises resources.

• Simplify Windows Hello for Business SSO with Cloud Kerberos Trust - Part 2 2023-03-04

  Part 2 of the Cloud Kerberos Trust trilogy - a step-by-step configuration walkthrough covering Entra Kerberos PowerShell setup, Intune Settings Catalog profile creation, and verification testing.

• Simplify Windows Hello for Business SSO with Cloud Kerberos Trust - Part 3 2023-03-04

  Part 3 of the Cloud Kerberos Trust trilogy - deep diving into the mechanics, migration from other trust models, NGC credentials, Wireshark captures, Kerberos ticket flows, and troubleshooting with klist.

• 2FA/MFA - Why Multi-Factor Authentication is Important 2023-01-17

  A high-level overview of multi-factor authentication concepts, types (SMS, app-based, hardware), and why MFA is critical in today's corporate IT landscape.

• Fix onmicrosoft.com Missing Default Domain 2022-03-07

  A quick workaround to fix the missing onmicrosoft.com default domain alias on synced identities in hybrid Exchange environments by temporarily changing the user's UPN.

• How to remove credentials from a FIDO2 key like a boss 2022-01-25

  Learn how to remove credentials from a FIDO2 key (Feitian keys specifically) and why housekeeping on your FIDO2 devices matters.

• The Windows Hello Zone! - Part 2 2020-12-16

  Part 2 of the Windows Hello Zone series - why PINs are more secure than passwords and real-world scenarios where Windows Hello for Business prevents credential theft.

• The Windows Hello Zone! - Part 1 2020-11-18

  Part 1 of the Windows Hello Zone series - real-world scenarios showing why biometric authentication with Windows Hello for Business is essential for enterprise security.

• Enable Microsoft Enterprise SSO plug-in for Apple Devices through Intune 2020-10-14

  How to enable the Microsoft Enterprise SSO plug-in for Apple iOS and macOS devices through Microsoft Intune.

• Passwordless journey with FIDO2 - Part 3 - Engine troubles 2020-02-07

  Part 3 of the FIDO2 passwordless journey covering unsupported key whitelisting, AAGUID discovery, and reviews of Ensurity ThinC-AUTH, KEY-ID, and OnlyKey security keys.

• Conditional Access and the woes of being an external user 2020-01-19

  Challenges of Conditional Access and MFA as an external/guest user in Entra ID tenants, and practical solutions including FIDO2 keys.

• Passwordless journey with FIDO2 - Part 2 - Usage experiences 2019-11-18

  Part 2 of the FIDO2 passwordless journey covering hands-on usage experiences with Solokeys, Yubico, and eWBM biometric security keys for Azure AD.

• Passwordless journey with FIDO2 - Part 1 - Getting started with Security keys 2019-10-28

  Part 1 of the FIDO2 passwordless journey covering requirements, setup hurdles, and an overview of security key vendors for Azure AD enterprise use.

• 2 Cool new password policy features in Microsoft Entra Connect Sync 2019-10-07

  Two new Microsoft Entra Connect Sync preview features: force password reset at logon and enforce cloud password policy for synced users.