Focus area

MFA

Deep dives covering MFA.

Guides, runbooks, and opinions focused on MFA.

Featured runbook

Entra SMS voice retirement: choose a telephony provider

Entra SMS voice retirement dates, who is in scope, and how to choose a telephony provider or move users to passkeys before the cut-off.

Need context?

Jump into the guided path, or browse everything if you’re after something specific.

Start Here Browse all runbooks

Explore other focus areas

Hop between landing zones, identity, networking, and more.

Landing Zones Identity Secure Networking Defender for Cloud Sentinel/KQL Networking

More in MFA

16 Oct 2026 12 min read

Break-glass accounts in Entra: passkeys, exclusions, alerts

A baseline for Entra break-glass accounts: two cloud-only Global Administrators, phishing-resistant MFA, Conditional Access exclusions, alerts, 90-day test.

Identity Entra Break-glass

15 Oct 2026 13 min read

Conditional Access baseline: a report-only-first runbook

A sourced Conditional Access baseline for Entra: emergency access, legacy authentication, MFA, admin protection and a report-only rollout that avoids lockouts.

Identity Entra Conditional Access