Why a Microsoft Architect Says It's Time to Get Off Active Directory
👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
Frequently asked questions about the retirement of Microsoft-provided SMS and voice authentication in Microsoft Entra ID and the move to passkeys.
Learn how to run a registration campaign in Microsoft Entra ID to nudge users toward passkeys or Microsoft Authenticator for stronger sign-in security.
Privileged roles and permissions in Microsoft Entra ID.
Learn how Microsoft Entra passkey on Windows enables phishing-resistant authentication with work or school accounts by using Windows Hello as a FIDO2 passkey provider.
Troubleshoot Microsoft Entra hybrid joined devices Summarize this article for me In this article This article provides troubleshooting guidance to help you resolve potential issues with devices that a…
The Enterprise Passkey Playbook: The Passkey Corners Most Rollouts Forget
This article describes how to configure Microsoft Entra Cloud Sync's Group Provision to AD with cloud sync.
👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
Simulate Conditional Access policy results with the What If tool to troubleshoot and optimize your environment.
Understand Microsoft Entra ID Intermediate Administrator Identity and Access Administrator Azure Microsoft Entra ID Active Directory This module explains Microsoft Entra ID. You'll compare Microsoft E…
Learn the role and management of Primary Refresh Token (PRT) in Microsoft Entra ID.
Other features like Conditional Access and Microsoft Intune require additional role assignments Device counts on the overview page don't update in real time. This prevents it from accessing your Micro…
Microsoft Entra Groups in 2026: memberOf, Nesting, Labels, Agents
👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
Instructions about how to find Microsoft Entra ID and how to create a new tenant for your organization.
Token Protection in Microsoft Entra Conditional Access Summarize this article for me In this article Overview Token Protection is a Conditional Access session control that attempts to reduce token rep…
Instructions about how to add your organization's custom branding to the Microsoft Entra sign-in experience.
How malware bypasses passkey phishing resistance in Windows and Microsoft Entra ID and the device-trust controls that actually stop it.
👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
...ticate, authorize, govern, and protect these nonhuman identitiesMicrosoft Entra Agent ID addresses these needs by providing a unified platform for managing agent identities at enterprise scale. Mic…
Learn how to manage rules for dynamic membership groups to automatically populate group members and rule references.
Learn how workload identify federation enables secure access to Microsoft Entra protected resources from external software workloads without managing secrets.
Microsoft-managed SMS and voice MFA will stop working on February 1, 2027.
👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
Learn how Microsoft Entra Connect matches and synchronizes on-premises objects with an existing Microsoft Entra tenant, and how to resolve hard match conflicts.
Microsoft-managed Conditional Access policies Summarize this article for me In this article Overview Every day, Mi... These simplified Conditional Access policies require multifactor authentication, w…
The Migration Guide That Saves 80% of Your Deployment Time
Learn about device sync coming to Entra Cloud sync, temporary opt-out for automatic passkey registration and more...
Learn about Microsoft Entra ID Governance license types, prerequisites, feature requirements, trials, and licensing for employees, guests, and agents.
This article describes the prerequisites and the hardware requirements for Microsoft Entra Connect.
How to enforce Microsoft Entra multifactor authentication for Azure Virtual Desktop using Conditional Access to help make it more secure.
Learn about how to use Microsoft Entra Conditional Access and authentication context with SharePoint sites and sensitivity labels.
Protecting Sensitive Data from Unsanctioned AI Apps
👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
Configure Salesforce for Single sign-on in Microsoft Entra ID Summarize this article for me In this article In this article, you learn how to integrate Salesforce with Microsoft Entra ID. To help sati…
Xbox Security's Playbook for Securing 70+ Entra Tenants
Learn about passkeys becoming the default authentication method, SMS and voice reitrement and more...
👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.
One compromised Agent ID blueprint can become a multitenant blast radius.
Learn about recommended Conditional Access and Intune device compliance policies and best practices for Microsoft Teams Rooms.
Learn about mandatory multifactor authentication (MFA) enforcement for Azure, Microsoft 365, and other admin portals, and how to prepare your tenant.
Enable passkeys in Authenticator Summarize this article for me In this article This article covers Authenticator-specific requirements and configuration for passkeys in Microsoft Authenticator for Mic…
Learn how to troubleshoot common issues with Microsoft Entra B2B collaboration. Resolve guest sign-in errors, direct connect access problems, policy update failures, and encrypted email access issues.
Learn about Entra Backup and Recovery going GA, public preview of custom extensions for PIM and more!
Practical AI threat intelligence playbook
Sign in Microsoft Entra users by using the Microsoft identity platform's implementation of the OpenID Connect extension to OAuth 2.0.
Configure adaptive session lifetime policies Summarize this article for me In this article Overview Warning If you're using the configurable token lifetime feature, we don't support creating two diffe…
Get an overview of entitlement management and how you can use it to manage access to groups, applications, and SharePoint Online sites for internal and external identities.
Learn how to use the license usage insights page in the Microsoft Entra admin center to monitor license usage and entitlements.
Use Microsoft Intune to configure Platform SSO and deploy the configuration to your macOS devices. Platform SSO enables single sign-on (SSO) using Microsoft Entra ID with the Secure Enclave, smart car…
Summarize this article for me In this article Microsoft Intun... Device and app posture flow back to Microsoft Entra Conditional Access, which gates access to corporate resources based on real, up-to-…
Combine Conditional Access with Intune compliance policies to define the requirements that users and devices must meet before gaining access to your organization's resources.
In this article, you learn about the SharePoint and OneDrive integration with Microsoft Entra B2B.
Security defaults in Microsoft Entra ID Summarize this article for me In this article Security defaults make it easier to help protect your organization from identity-related attacks like password spr…
Conditional Access for agents Summarize this article for me In this article Conditional Access is an intelligent policy engine that helps organizations control how users and agents access corporate re…
Improved enforcement for All resources policies with resource exclusions Summarize this article for me In this article Overview Microsoft Entra ID is rolling out an improved enforcement model for Cond…
Learn what is new with Microsoft Entra, such as the latest release notes, known issues, bug fixes, deprecated functionality, and upcoming changes.
Learn how Microsoft Entra Backup and Recovery helps you recover from malicious attacks or accidental changes to tenant objects
Microsoft Entra Conditional Access Optimization Agent Summarize this article for me In this article The Microsoft Entra Conditional Access Optimization Agent helps you ensure that all users, applicati…
Conditional Access authentication strengths Summarize this article for me In this article An authentication strength is a Microsoft Entra Conditional Access control that specifies which combinations o…
Learn how to remove stale devices from your database of registered devices in Microsoft Entra ID.
Summarize this article for me In this article Overview The Microsoft Entra admin center is a web-based portal that provides a unified administrative experience for config... From the admin center, adm…
Use Microsoft Entra groups to manage role assignments Summarize this article for me In this article With Microsoft Entra ID P1 or P2, you can create role-assignable groups and assign Microsoft Entra r…
Instructions about how to create and update Microsoft Entra groups, such as membership and settings.
Compare the default user permissions available in Microsoft Entra ID and learn how to restrict access.
Manage agent identities Create an agent blueprint Create agent identities Manage owners and sponsors Govern agent lifecycles ID Governance for agents Access packages for agents Maintain agent sponsors…
Learn about the pricing and billing structure for Microsoft Entra External ID, along with steps for linking an external tenant to an Azure subscription.
Summarize this article for me In this article Microsoft Entra is a family of identity and network access products that helps organizations implement a Zero Trust security strategy. Administrators can …
Learn how to sign in to an Azure VM that's running Windows by using Microsoft Entra authentication.
Conditional Access policies for local administrator password recovery - Configure Conditional Access policies on directory roles that have the authorization of password recovery. Conditional Access po…
Application and service principal objects in Microsoft Entra ID Summarize this article for me In this article This article describes application registration, application objects, and service principa…
Detailed guidance for planning the prerequisites to deploy passwordless and phishing-resistant authentication for organizations that use Microsoft Entra ID.
Compare solutions for using Microsoft Entra External ID to work with people outside your organization, including B2B collaboration and Azure AD B2C.
Learn how to configure Microsoft Entra hybrid join.
Learn about using the Microsoft Authenticator in Microsoft Entra ID to help secure your sign-ins.
Get an overview of the Microsoft Entra Kerberos protocol.
An overview of the managed identities for Azure resources.
Microsoft Entra joined devices can help you to manage devices accessing resources in your environment.
In this quickstart, you learn how to create a Microsoft Entra tenant for use in developing applications that use the Microsoft identity platform for authentication and authorization.
Use Microsoft Entra with OAuth 2.0 and OpenID Connect (OIDC) to protect the apps and web APIs you build. Learn how to sign in users and manage their access through our quickstarts, tutorials, code sam…
Learn to configure certificates, client secrets, and federated credentials in Microsoft Entra for secure app authentication.
Learn about the AADSTS error codes that are returned from the Microsoft Entra security token service (STS).
Configure Temporary Access Pass to register passwordless authentication methods Summarize this article for me In this article Passwordless authentication methods like a passkey (FIDO2) let users sign …
Verify that your users meet mandatory MFA requirements for Azure and admin portals. Check and enable MFA for Microsoft Entra ID P1, P2, and Free licenses.
Developer guidance and scenarios for Microsoft Entra Conditional Access authentication context
Developer guidance and scenarios for Microsoft Entra Conditional Access and Microsoft identity platform.
Learn about the combined password policy and check for weak passwords in Microsoft Entra ID
Use tenant restrictions to control the types of external accounts that users can use on your networks and the devices that you manage.
Learn how to configure Microsoft Entra ID and Microsoft Intune to support modern endpoint management. This learning path covers identity infrastructure, device enrollment, and automated deployment str…
Learn how to enable Microsoft Entra ID tokens for Actionable Messages
Protect user accounts from attacks with Microsoft Entra smart lockout Summarize this article for me In this article Smart lockout helps lock out bad actors that try to guess your users' passwords or u…
...ur Conditional Access deployment, consider the following points: Create a dedicated security group for your emergency access accounts, such as EmergencyAccess, and exclude this group from Condition…
Microsoft Entra ID documentation Use Microsoft Entra ID to manage user identities and control access to your apps, data, and resources. User management Manage users and groups, assign licenses, and ma…
Conditional Access: Conditions Summarize this article for me In this article Overview In a Conditional Access policy, admins use one or more signals to improve policy decisions. Admins combine multipl…
Learn how to understand the parts of a role assignment and restricted scope in Microsoft Entra ID.
Plan a Conditional Access deployment Summarize this article for me In this article Overview Planning your Conditional Access deployment is critical to achieving your organization's access strategy for…
Discover how to analyze Conditional Access policy results with tools like Azure Monitor and insights workbooks for better policy management.
Migrate approved client app to application protection policy in Conditional Access Summarize this article for me In this article Overview In this article, you learn how to migrate from the "Require ap…
Protect security info registration with Conditional Access policy Summarize this article for me In this article Overview Securing when and how users register for Microsoft Entra multifactor authentica…
Conditional Access: Target resources Summarize this article for me In this article Overview Target resources (formerly cloud apps, actions, and authentication context) are key signals in a Conditional…
This article provides several options for automatically and manually remediating risks and covers scenarios when users were blocked because of user risk, so you know how to unblock them. Prerequisites…
Password policies and account restrictions in Microsoft Entra ID Summarize this article for me In this article In Microsoft Entra ID, there's a password policy that defines settings like the password …
Microsoft's Security Service Edge (SSE) solution Microsoft Entra Internet Access and Microsoft Entra Private Access - coupled with Microsoft... Apply universal Conditional Access policies for all inte…
Learn how custom controls in Microsoft Entra Conditional Access work.
Conditional Access for workload identities Summarize this article for me In this article Overview Conditional Access policies historically applied only to users when they access apps and services like…
Learn to design and implement strong authentication controls, apply Just-in-Time privileged access strategies, and extend identity-based security to AI-powered applications using Microsoft Entra.
Learn about the architecture, connectors, authentication methods, and security benefits of Microsoft Entra application proxy.
Tutorial: Secure user sign-in events with Microsoft Entra multifactor authentication Summarize this article for me In this article Multifactor authentication is a process in which a user is prompted f…
Learn how Microsoft Defender for Cloud Apps provides Conditional Access app control.
Use Microsoft Entra ID authentication for secure access to Azure DevOps Services with modern identity management capabilities.
Set up multifactor authentication for Microsoft 365 Summarize this article for me In this article Multifactor authentication (also known as MFA, two-factor authentication, or 2FA) requires a second ve…
Troubleshoot sign-in problems with Conditional Access Summarize this article for me In this article Overview Use this article to fix unexpected sign-in outcomes related to Conditional Access by checki…
Configure and enable risk policies Summarize this article for me In this article There are two types of risk policies in Microsoft Entra Conditional Access you can set up. You can use these policies t…
Summarize this article for me In this article Overview Modern security extends beyond an organization's n... Microsoft Entra Conditional Access brings signals together, to make decisions, and enforce …
SC-900: Introduction to Microsoft Entra
Learn how to configure external collaboration settings in Microsoft Entra External ID. Control guest user access, specify who can invite guests, and manage domain restrictions for B2B collaboration.
Learn about B2B collaboration for sharing apps with external identities, business partners, and guests, using External ID for authentication and identity access management.
Learn how to manage cross-tenant access settings for B2B collaboration and direct connect in Microsoft Entra External ID. Control inbound and outbound access, trust MFA, and device claims from other o…
Continuous access evaluation Summarize this article for me In this article Overview Token expiration and refresh are a standard mechanism in the industry. By default, ... Scenarios There are two scena…
Learn to configure Conditional Access adaptive session lifetime policies to protect critical apps, sensitive data, and high-impact users in your organization.
Learn how to activate Microsoft Entra roles in Privileged Identity Management (PIM).
Learn how to configure Microsoft Entra role settings in Privileged Identity Management (PIM).
Summarize this article for me In this article Microsoft Entra ID Protection can provide a broad range of risk detections that can be used to identify suspicious activity in your organization. Full det…
B2B collaboration invitation redemption Summarize this article for me In this article Applies to: Workforce tenants (learn more) This article explains the Microsoft Entra B2B invitation... Invitation …
How to find your Microsoft Entra tenant ID Summ... Microsoft Entra ID is trusted to authenticate the subscription's users, services, and devices. Find tenant ID through the Microsoft Entra admin cente…
Block access by location Summarize this article for me In this article Overview With the location condition in Conditional Access, you can control access to your cloud apps based on the network locati…
Discover how to use Conditional Access filters for applications to streamline policy management and enhance security in Microsoft Entra ID.
Learn how to require known compliant network locations to connect to your secured resources with Conditional Access.
Conditional Access: Network assignment Summarize this article for me In this article Overview Admins can create policies that target specific network locations as a signal along with other conditions …
Microsoft Entra ID Free Summarize this article for me In this article Micr... Services included Microsoft Entra ID Free provides you with the following services at no cost: User and group management O…
How it works: Microsoft Entra multifactor authentication Summarize this article for me In this article Multifactor authentication is a process in which users are prompted during the sign-in process fo…
Microsoft Entra documentation Learn more about the Microsoft Entra family of multicloud identity and network access solutions. Overview What is Microsoft Entra. Overview What is Microsoft Entra Agent …
...ications Configure and manage user and admin consent Create and manage application collections Plan and implement app registrations Plan for app registrations Create app registrations Configure app…
Overview: Cross-tenant access with Microsoft Entra External ID Summarize this article for me In this article Applies to: Workforce tenants (learn more) Microsoft Entra organizations can use External I…
Learn about the properties of a B2B guest user in Microsoft Entra External ID. Understand user types, authentication methods, and how to manage guest user access and permissions.
...l Access deployment, see the Conditional AccessCommon policies for Microsoft Entra multifactor authentication Common use cases to require Microsoft Entra multifactor authentication include: For adm…
Enable passwordless security key sign-in to on-premises resources by using Microsoft Entra ID Summarize this article for me In this article This topic shows how to enable passwordless authentication t…
Learn how to enable passwordless sign-in to Microsoft Entra ID by using Microsoft Authenticator.
Conditional Access service dependencies Deploy Conditional Access Concept Plan a Conditional Access deployment How-To Guide Block legacy authentication Troubleshooting using the What If tool Common Co…
Delete a tenant in Microsoft Entra ID Summarize this article for me In this article Overview When an organization (tenant) is deleted in Microsoft Entra ID, all resources in the organization are also …
Conditional Access: Session Summarize this article for me In this article Overview In a Conditional Access policy, an admin can use session controls to enable limited experiences in specific cloud app…
Require phishing-resistant multifactor authentication for administrators Summarize this article for me In this article Overview Accounts with privileged administrative roles are frequent targets of at…
Conditional Access: Authentication flows Summarize this article for me In this article Overview Microsoft Entra ID supports various authentication and authorization flows to provide a seamless experie…
Block legacy authentication with Conditional Access Summarize this article for me In this article Overview Microsoft recommends that organizations block authentication requests using legacy protocols …
Build a Conditional Access policy Summarize this article for me In this article Overview As explained in the article What is Conditional Access, a Con... A Conditional Access policy combines signals t…
Require multifactor authentication for all users Summarize this article for me In this article Overview As Alex Weinert, the Director of Identity Security at Microsoft, mentions in his blog post Your …
Require device compliance with Conditional Access Summarize this article for me In this article Overview Microsoft Intune and Microsoft Entra work together to secure your organization through device c…
Conditional Access: Filter for devices Summarize this article for me In this article Overview When administrators create Conditional Access policies, the ability to target or exclude specific devices …
Conditional Access insights and reporting Summarize this article for me In this article Overview The Conditional Access insights and reporting workbook enables you to understand the impact of Conditio…
Create Conditional Access policies using Microsoft Entra ID Protection user risk.
Deploy Token Protection with Microsoft Entra Conditional Access for Windows
Set up Microsoft Entra terms of use with Conditional Access to require policy acceptance before resource access. Complete guide with prerequisites, step-by-step configuration, and troubleshooting tips…
Protect your organization by implementing Conditional Access policies that address sign-in risks using Microsoft Entra ID Protection.
Describe Azure identity, access, and security
Enable SAML single sign-on for an enterprise application Summarize this article for me In this article In this article, you use the Microsoft Entra admin center to enable single sign-on (SSO) for an e…
In this overview, learn what Microsoft Entra Domain Services provides and how to use it in your organization to provide identity services to applications and services in the cloud.
Get information on how to configure group claims for use with Microsoft Entra ID.
Learn about the different types of sign-in logs that are available in Microsoft Entra monitoring and health.
Learn how to use Microsoft Entra ID Protection for B2B users to secure your organization. Discover benefits and steps to unblock accounts.
Use administrative units for more granular delegation of permissions in Microsoft Entra ID.
Learn how to enable users to sign in to Microsoft Entra ID with their email as an alternate login ID
Learn how to dynamically ban weak passwords from your environment with Microsoft Entra Password Protection
Learn how to plan and deploy Microsoft Entra Password Protection in an on-premises Active Directory Domain Services environment
Learn how to enable per-user Microsoft Entra multifactor authentication by changing the user state
Learn about the recommended configuration for reauthentication prompts with Microsoft Entra multifactor authentication and how session lifetime is applied.
Ban weak passwords in on-premises Active Directory Domain Services environments by using Microsoft Entra Password Protection
Automation to detect, remediate, investigate, and analyze risk data with Microsoft Entra ID Protection
Microsoft Learn for Microsoft Entra Microsoft Entra Build your skills for creating secure identities and access with the Microsoft Entra family. Browse all Microsoft Entra ID learning paths Microsoft …
Learn how to use Microsoft Entra External ID for all your external identities scenarios, including B2B collaboration for your workforce and, and identity and access management for your consumer apps.
Understand how Application Provisioning works in Microsoft Entra ID.
Implement an identity management solution using Microsoft Entra ID At a glance Level Intermediate Skill Product Azure Microsoft Entra ID Microsoft Entra External ID Microsoft Entra Microsoft Entra Wor…
Implement an authentication and access management solution
Granting access via Entra ID App-Only
Validate your technical skills and open doors to new possibilities of advancement with Microsoft Applied Skills.
This module covers a wide view of the definition and available services for identity provided in the Microsoft Entra ID. Start with the basics of authentication, authorization, and access tokens. Afte…