Focus area
Make identity the security boundary.
Entra ID, PIM, workload identity, and secrets discipline.
Identity is the control plane. Ship patterns for privileged access, role separation, managed identities, and vault design that won’t crumble during the next audit.
Entra SMS voice retirement dates, who is in scope, and how to choose a telephony provider or move users to passkeys before the cut-off.
Jump into the guided path, or browse everything if you’re after something specific.
Hop between landing zones, identity, networking, and more.
A baseline for Entra app consent: user consent, admin workflow, credential expiry, app management policies and owners, with portal paths and roles.
Entra passkeys on Windows: what MC1282568 says, where Learn disagrees on AAGUIDs, and a runbook to pilot, check and roll back.
A baseline for Entra break-glass accounts: two cloud-only Global Administrators, phishing-resistant MFA, Conditional Access exclusions, alerts, 90-day test.
A sourced Conditional Access baseline for Entra: emergency access, legacy authentication, MFA, admin protection and a report-only rollout that avoids lockouts.
MC1325414 says Entra SSPR will stop accepting some directory attributes. What it says, where Microsoft's dates disagree, and how to check registration coverage.
How to run Privileged Identity Management day to day: licensing, eligible assignments, role settings, approvals, alerts, audit and lockout traps.
From 4 November 2026 default Entra users can create agent blueprints unless you turn it off. What changes, who should keep the ability, and how to restrict it.
A self-hosted Azure pipeline that ships SailPoint Identity Security Cloud audit events into Microsoft Sentinel, and the design choices that keep it Tier 0.
A practical identity baseline for Azure landing zones: admin separation, PIM, Conditional Access, workload identities and secrets, written as a runbook.
Search
Type an Azure service, control, or tag. Results refresh after every deploy.
Examples: landing zone policy, workload identity, vpn gateway
