#entra-id

Understanding SAML Single Sign-On: Connecting Salesforce with Microsoft Entra ID

Is M365 Secure by Default? The Truth About Identity Security with Jonathan Hope Microsoft MVP

In the rapidly evolving landscape of modern IT, the traditional boundaries of security have vanished. Gone are the days when a robust…

Delegated Authentication vs. App-Only Authentication in Microsoft Entra ID

This guide provides a hands-on walk-through detailing the fundamental differences between Delegated Authentication and Application-Only…

อยู่ๆ คอม(หรือ VM) เธอก็ขึ้นจอฟ้าถามคีย์ Bitlocker ได้นะคะ แล้วจะดูคีย์ได้ที่ MS Account หรือ Entra…

คอมปัจจุบันที่ล้วนมีชิปเก็บคีย์เข้ารหัสบนเมนบอร์ดชื่อ Trusted Platform Module (ปัจจุบันเป็นมาตรฐานเวอร์ชั่น 2.0 แล้ว…

Microsoft Entra Tenant Governance

Find Configuration Drift

Salesforce July 2026 MFA: Will Your Admins Get Blocked at the Door?

A decision-tree guide for Salesforce admins. Three checks, three fixes, one weekend. Plus the one gotcha that catches every team.

Project: Enterprise SSO and Identity Lifecycle Automation with Microsoft Entra ID

Project Overview:

Connecting Entra External ID (EEID) to Entra ID as an external provider via OIDC, not via a Guest…

The community has requested this feature for a long time.

Identity is the New Firewall: Replacing Legacy VPNs with Entra Private Access (SSE)

Picture this: a mid-sized financial services company — 2,500 hybrid users, SAP on-premises, legacy RDP jump boxes, and VPN that has been…

Manage external users in your Microsoft 365 tenant

There are a lot of ways how to give access to external users in your organization’s tenant. For example you want to give a MSP access to…

On Entra External ID (EEID) federation with Entra ID

Questions around this particular federation are among the most popular on Q&A.

The Keycloak Upgrade That Broke SAML Logins

Key Lessons from a Keycloak Upgrade Failure

Power Pages Authentication Methods: The Complete Guide (2026)

“Wait, why are we storing passwords in Dataverse? Don’t we have Azure AD?”

실무 시나리오 E2E: 사내 문서 질의 시스템 만들기: 9편

지금까지 8편에 걸쳐 Microsoft Foundry 에이전트를 구성하는 각 요소들을 하나씩 다뤘습니다. 에이전트 유형, 툴 연동, MCP, 관측성, 품질 평가, 보안, APIM 패턴, 멀티에이전트 오케스트레이션.

Send OpenTelemetry Data Directly to Application Insights Using the OTLP Exporter — No Collector…

Most guides for sending OpenTelemetry data to Azure Monitor show you a setup with the OpenTelemetry Collector sitting between your app and…

Issue #264 — Semgrep Meets AI for IaC, Entra ID in Stacks, Feature Flags Beyond Booleans, AgentCore…

This week covers combining Semgrep with AI for precise IaC security scanning, automating Entra ID identity management with Terraform…

Adding application roles to Managed Identity

Friend Link —…

Strategic Risks to Digital Sovereignty: Entra ID Vendor Lock-In for Microsoft Windows Cloud…

Identity as the New Perimeter. Background, systemic geopolitical and technological risks and mandatory cloud adoption in the EU.

Cloud Notes #1: Microsoft Entra Access and Conditional Access.

Hi, welcome to my first in a series of summaries of cloud features from cloud ecosystems such as Microsoft Azure/365, Google Cloud Platform…

Complete Guide: Setting Up Azure SQL Server with Microsoft Entra ID Authentication (2026 Edition)

A comprehensive, updated guide to configuring Microsoft Entra ID (formerly Azure Active Directory) authentication for Azure SQL Database…

STOLEN TOKENS, NOT STOLEN PASSWORDS: Why Token Protection Is the Third Zero Trust Pillar in…

"Modern identity compromises don’t bypass MFA. They reuse what MFA already granted.”

Why Conditional Access Is Not Zero Trust: A Deep Dive Into Architecture, Not Configuration

“If your Zero Trust strategy is a checklist of Conditional Access policies, you don’t have Zero Trust. You have a rules engine mistaking…

Beyond the Checkbox: Implementing Real Zero Trust with Microsoft Entra ID (A Financial Sector Case…

Beyond the Checkbox: Implementing Real Zero Trust with Microsoft Entra ID (A Financial Sector Case Study)

Part 4: SAML — Encryption and Decryption of Assertion

Part 4 outlines the process of encrypting and decrypting SAML assertions to ensure the security of sensitive information. It explains how…

Azure DevOps → ACR: Federated service connections vs. client-secret SPs (and the roles you need)

Goal: let your Azure Pipelines build and push/pull images to Azure Container Registry (ACR) securely and with least privilege.

把 DEM（Entra registered）機器「轉正」為 Entra joined

TL;DR：把早期以 DEM 註冊的 Entra registered 公司電腦，轉為 Entra joined。完成後：

一台難搞的 Windows 11 Pro 與 其Entra Join 問題排除紀錄

這次處理了一台 Windows 11 Pro，目標只是讓它 Entra Join + Intune 自動註冊。 結果一路踩雷，明明該符合的基本條件都確認過，卻還是完全卡住。紀錄過程如下。

Migrating Next-Auth to Auth.js and Microsoft Entra ID

When you’re upgrading from Next-Auth v4 to Auth.js v5 and moving from Azure AD to the newly renamed Microsoft Entra ID, you need a clear…

Implementing Token-Based Authorization on AWS API Gateway with Microsoft Entra ID

Securing APIs with token-based authorization is a common pattern in modern application development. This article walks through how to…

UPN vs Email login in Azure Entra ID

You can either provide your azure Entra id email or UPN to login. The steps will remain same. the difference is

[Backend] Clarify Role and Setting in Microsoft Entra ID

Explains how to integrate OIDC with Microsoft Entra, clarifies portal and app registration differences, and outlines how clients can…

What is FAPI 1.0 and How it woks and Use-cases Explained

FAPI 1.0, or Financial-grade API Security Profile 1.0, is a security specification created to strengthen the way financial and other…

Part 6: Entra ID & Active Directory Hybrid Envs Attacks, Techniques, Tools and Attack Paths —…

Welcome back to our multi-part series on Understanding and Attacking Hybrid Environments: The Bible of Entra ID <> Active Directory…

Part 2: Device and Application Identities

We’re uncovering the different device configurations, what are App Registrations and Enterprise Applications (a.k.a Service Principals)

How to setup “Users at risk detected alerts” in Entra ID

Protect Your Organization with Microsoft Entra ID Protection: Users at Risk Detected Alerts

De la sécurisation des AD à Entra ID

Les AD sont le socle principal des systèmes d’informations des derniers années. Cela n’a pas échappé aux différents groupes APT (Advenced…

Logging in to a Linux VM in Azure using Entra ID

Azure enables you to log in to your Linux VMs using only your Entra ID (formerly Azure AD) credentials, eliminating the need for…

Seamlessly Integrate Azure OpenAI with EntraID: A Guide to Using Azure SDK and Interactive Browser…

Learn to integrate Azure OpenAI with EntraID using Azure SDK and Interactive Browser Credential.

Microsoft Graph: Get an Access Token from a PowerShell Session

Note: All my stories can be read for free on my personal blog. This story was originally published on June 5 2024 on my personal blog.

How to Scan and Disable Inactive Accounts on Azure EntraID

If you have a difficulty reading this post, check it out here.

Druva inSyncのプロビジョニング方式をSCIMにして、任意のプロファイルを割り当てる

Druva inSyncにSCIMでユーザープロビジョニングする際に、任意のバックアッププロファイルを指定する方法を紹介します。

Criação de Usuários em Massa no Entra ID Usando Bulk Operations

Sabemos que muitas das vezes os processo de criação de usuários podem se tornar um problema, dependendo da quantidade e do projeto a ser…

A better way to report administrator role elevations in Privileged Identity Management