Focus area
Deep dives covering Entra.
Guides, runbooks, and opinions focused on Entra.
Entra SMS voice retirement dates, who is in scope, and how to choose a telephony provider or move users to passkeys before the cut-off.
Jump into the guided path, or browse everything if you’re after something specific.
Hop between landing zones, identity, networking, and more.
A baseline for Entra app consent: user consent, admin workflow, credential expiry, app management policies and owners, with portal paths and roles.
Entra passkeys on Windows: what MC1282568 says, where Learn disagrees on AAGUIDs, and a runbook to pilot, check and roll back.
A baseline for Entra break-glass accounts: two cloud-only Global Administrators, phishing-resistant MFA, Conditional Access exclusions, alerts, 90-day test.
A sourced Conditional Access baseline for Entra: emergency access, legacy authentication, MFA, admin protection and a report-only rollout that avoids lockouts.
MC1325414 says Entra SSPR will stop accepting some directory attributes. What it says, where Microsoft's dates disagree, and how to check registration coverage.
How to run Privileged Identity Management day to day: licensing, eligible assignments, role settings, approvals, alerts, audit and lockout traps.
From 4 November 2026 default Entra users can create agent blueprints unless you turn it off. What changes, who should keep the ability, and how to restrict it.
Search
Type an Azure service, control, or tag. Results refresh after every deploy.
Examples: landing zone policy, workload identity, vpn gateway
