Entra.Chat

Oct 31, 202643m#83

Most SaaS vendors connect to your tenant with one multitenant app and one credential, shared by every customer. Kelvin Tegelaar, founder of CyberDrain and creator of CIPP (used by well over 10,000 MSPs), sees it from bot

Oct 24, 202639m#79

Most Conditional Access gaps aren’t exotic. They come from reading policies the wrong way: as firewall rules with an “allow”, as a list of platforms that seems complete, as an MFA exception for the office that made sense

Oct 17, 202650m

Most tenants have the same problem: hundreds of app registrations and service principals, client secrets that were set to expire in a hundred years, permission grants nobody remembers approving, and test tenants that wer

Oct 9, 202650m#77

A phished and stolen refresh token is one of the most useful things an attacker can take from your tenant. It is a long-term artifact, which is why so many phishing attempts go after it. Alex Pavlovsky’s answer to that a

Oct 2, 202634m#76

Ask a coding agent to build something that talks to another service and watch what it does. It creates a client secret. Then another one. As Arturo Lucatero puts it, next thing you know you have ten secrets that were cre

Sep 17, 202636m#75

Active Directory is not dead. It is nearly thirty years old, Microsoft is still shipping new capabilities and new telemetry for it, and most of the forests running today will outlive the people currently administering th

Sep 6, 202659m#74

At Black Hat USA 2026, Microsoft’s David Weston put three numbers on a slide that anyone still running domain controllers should sit with. The Microsoft Security Response Center went from 80 patches in February to 1,142

Aug 31, 202643m#73

Microsoft starts making passkeys the default in Microsoft Entra ID on 1 September 2026, and retires Microsoft-provided SMS and voice MFA on 1 February 2027. Every organisation with a large, messy population now has to an

Aug 25, 202642m#72

On 3 November 2026, the memberOf operator in Microsoft Entra dynamic membership groups stops working. Nothing errors. Nothing breaks loudly. Every dynamic group, dynamic administrative unit and entitlement management aut

Aug 17, 202636m#71

Passkeys are phishing-resistant. But that resistance is enforced by your browser, which binds every authentication to the origin that requested it. Skip the browser, and the guarantee weakens. In this episode of Entra.Ch

Aug 10, 202653m#70

Microsoft-managed SMS and voice MFA will stop working on February 1, 2027. That deadline makes passkey planning urgent, but enabling a new authentication method is only the first milestone. In this episode of Entra.Chat,

Aug 3, 202648m#69

An Entra GSA migration should not mean throwing away years of useful SSE policy work and rebuilding every application, segment, and rule by hand. Existing configuration carries hard-won intent: which populations need acc

Jul 28, 202654m

Conditional Access no longer begins and ends with identity signals. Microsoft Purview can now influence the controls Entra administrators are asked to implement. From insider-risk conditions in Conditional Access to inli

Jul 20, 202646m

Xbox Security runs a gaming-specific Microsoft Entra baseline across more than 70 tenants every night. The scale is striking: about 50 controls, dozens of independently operated game-studio tenants, and one parallel pipe

Jul 12, 202654m#66

Microsoft Entra Agent ID uses familiar application and service-principal objects under the hood, but its one-to-many hierarchy creates a different security boundary. A blueprint can be associated with many agent identiti

Jul 4, 202644m#65

AI agent security is not just about attackers using AI. It is also about attackers targeting the agent ecosystem most organizations cannot see clearly yet: MCP servers, agent skills, packages, API keys, prompts, tools, a

Jun 28, 202647m#64

Folks, every big thing in identity started as somebody’s late-night side quest and Vince Smith has been in the room for a lot of them. In this episode of Entra Chat, Vince (the PM lead driving Microsoft Entra Agent ID) w

Jun 20, 20261h 8m

Not every admin in your tenant is a person. Service principals, app registrations, and the new wave of agent identities can quietly hold permissions powerful enough to own your entire environment and most orgs can’t even

Jun 13, 202643m#62

AI agents can make decisions and act faster than any human — which means your old identity security playbook no longer holds. In this episode of Entra Chat, [host name] sits down with Nikhil, a 10+ year Microsoft identit

Jun 6, 202634m#61

In this episode of Entra Chat, we sit down with Christina Morillo , the Senior Director of Information Security for the New York Football Giants , to explore her inspiring transition from an identity specialist to a top-

May 31, 202646m#60

Passkeys are one of those technologies that sound simple on paper. Turn them on.Users register them.Passwords go away.Everyone is more secure. But in the real world, passkey rollouts are not just an authentication settin

May 23, 202649m#60

Microsoft had 7 million internal tenants and almost lost control of their environment and your org might be facing the same problem at a smaller scale. In this episode, we sit down with Jeff Staiman , PM Area Lead for Te

May 16, 202650m#59

Fabian and Thomas join the podcast to share their extensive experience and unpack the massive wave of updates coming to Microsoft Entra. We talk about the massive shift toward Passkeys and registration campaigns, the imp

May 9, 202644m#58

Microsoft Entra Agent ID Just Went GA Here’s What You Need to Know About Agent Permissions If you’ve been waiting for the dust to settle on Microsoft Entra Agent ID before diving in, the wait is over. Agent ID hit Genera

May 2, 20261h 1m#57

Maester is back with one of its biggest release since launch. In this episode, we are joined by Sam Erde, Architect at Patriot Consulting and one of Maester’s core maintainers, to walk through everything that’s landed in