// topics

Microsoft Entra ID

Identity is the control plane for Microsoft 365 and Azure. Everything here covers Entra ID: sign-in, authentication methods, app permissions, roles, governance and the changes Microsoft is making to them.

Start here

Governing AI agent identities in Entra: sponsors, access packages and expiry
How to govern AI agent identities in Entra: assign sponsors, grant access through access packages, set expiry and handle a sponsor leaving.
Entra ID and Active Directory backup and recovery: the complete guide
How to back up and recover Entra ID and on-premises Active Directory: soft delete, Entra Backup and Recovery, AD Recycle Bin, system state and forest recovery.
Domainless SAML federation: let partners sign in with their own IdP, whatever their email domain
SAML/WS-Fed federation for B2B guests used to depend on the guest's email domain matching the partner's IdP.

Coming up

Learning paths

Reference and tools

All Microsoft Entra ID posts (43)

Entra ID and Active Directory backup and recovery: the complete guide 5 Nov 2026
The $6.3 billion Binance hack may have started with one engineer's laptop: what happened, and what every IT team should take from it 30 Oct 2026
Introducing Admin Lens: errors explained right where you see them 18 Oct 2026
Every Entra default user permission, what it does, and how to check yours in one command 16 Oct 2026
MC1506733: every user can create agent blueprints in Entra from November unless you turn it off 14 Oct 2026
Governing AI agent identities in Entra: sponsors, access packages and expiry 11 Oct 2026
Domainless SAML federation: let partners sign in with their own IdP, whatever their email domain 10 Oct 2026
SOC Identity Responder: contain a compromised account without handing out admin roles 9 Oct 2026
Lock down app consent without blocking your users 23 Sept 2026
Unattended Graph PowerShell scripts with certificate authentication 16 Sept 2026
Microsoft is retiring its own SMS and voice MFA. Here's your plan. 4 Sept 2026
Microsoft Authenticator now blocks jailbroken and rooted devices 22 Jul 2026
BYOD Windows access with Entra registration is now GA 15 Jul 2026
Entra Connect Sync is on its way out. Start planning for Cloud Sync. 8 Jul 2026
Entra ID backup and recovery: how the new undo button for your tenant works 24 Jun 2026
Account Discovery: find the accounts your SaaS apps forgot to tell you about 17 Jun 2026
Soft delete for Entra device objects: a safety net for device clean-ups 10 Jun 2026
Cross-tenant group sync is GA: one group, many tenants 3 Jun 2026
System-preferred authentication now picks the first factor too 27 May 2026
Rolling out "require compliant device" without a flood of tickets 20 May 2026
Entra Agent ID: giving AI agents real identities 6 May 2026
Configurable token lifetimes are GA: when to shorten them (and when not to) 29 Apr 2026
Require phishing-resistant MFA on every PIM activation 22 Apr 2026
Tenant configuration management: snapshot your Entra config and catch drift 8 Apr 2026
Hybrid join without Entra Connect: hybrid join using Entra Kerberos 1 Apr 2026
Clean up guest accounts with access reviews 25 Mar 2026
Synced passkeys and passkey profiles are now GA in Entra ID 18 Mar 2026
Six KQL queries for Entra sign-in logs every admin should keep 11 Mar 2026
External MFA is GA: third-party MFA without giving up Conditional Access 25 Feb 2026
Group-based licensing: finding and fixing assignment errors 11 Feb 2026
Converting synced users to cloud-managed: Source of Authority is GA 28 Jan 2026
Deploy from GitHub Actions to Azure without storing a single secret 21 Jan 2026
AADSTS75011: when the app insists on how you signed in 14 Jan 2026
Managed identities vs service principals: which should your workload use? 7 Jan 2026
Named locations: getting IP ranges and countries right in Conditional Access 17 Dec 2025
Authentication strengths: requiring the right kind of MFA 10 Dec 2025
Test Conditional Access safely with report-only mode and What If 26 Nov 2025
SCIM provisioning when every target is its own app 19 Nov 2025
Break-glass accounts done right 12 Nov 2025
Activate PIM roles from PowerShell with Microsoft Graph 5 Nov 2025
Find expiring app secrets and certificates before they bite 29 Oct 2025
Rolling a SAML signing certificate without an outage 22 Oct 2025
Temporary Access Pass: onboarding users without a password 15 Oct 2025