#ConditionalAccess

Does Patch My PC Cloud support #ConditionalAccess for workload identities? As we wrap up #CybersecurityAwarenessMonth, we're breaking down Microsoft's Conditional Access limitations and the security controls available to help protect your environment. Watch @JordanTheITguy to learn more 👇 #Cybersecurity #IdentitySecurity #PatchMyPC

🔍 Hunting for #ConditionalAccess bypasses and baseline scope enforcement in #MicrosoftEntra?  ConditionalAccessAudiences  logs every resource evaluated by CAP - but only as raw GUIDs. I built a KQL query that resolves them to names + adds key signals. 🔗

Microsoft Entra Conditional Acces policy plans are now ready for modeling in the CA Simulator. Test how migrating the previous policies will evaluate to in the plans using the Sandbox. Check it out at #entra #conditionalaccess #policyplans

Working with Conditional Access Policies? This update is handy! [Article] Viewing changes to Conditional Access policies just became easier! Credit: thanks Jan Bakker for diving quickly into it #ConditionalAccess #AuditLogging

Applying some visuals on that CA Simulator #ConditionalAccess #EntraID

Microsoft turns on "Require risk remediation for high-risk users" in Entra ID P2 tenants the week of Oct 28 (MC1507808). Check your high-risk users can do MFA and verify break-glass exclusions first. #MicrosoftEntra #ConditionalAccess

I've started to work on the next part of the blog series about securing privileged access in #AzureAD and #Azure. Designing #ConditionalAccess policies and configuring #AccessPackages (in consideration of Enterprise Access/Tiering Model) will be the focus of the upcoming article.

Just Dropped In (To See What Condition My Conditional Access Rule Was In): Part 4 – Require multifactor authentication for guests. The next part of the #MSIntune #ConditionalAccess series by myself and Mike Marable @mike_marable drops #MEM #Security

How to hunt sign-ins that bypass #ConditionalAccess 🔐 in #MicrosoftEntra? 💡 Outstanding research by @_dirkjan & @fabian_bader: They published their analysis with identified bypasses of first-party apps and combinations of API and resource combos. 👉

I finally came around and documented all the Conditional Access bypasses in a single blog post. It contains not only the documented bypasses, but also the results of new research. #Entra #ConditionalAccess #Security #Cheese

What Are Conditional Access Policy Plans? www.​youtube.​com/shorts/eJrjYA-GG3c MSFTMechanics #ConditionalAccess #MicrosoftEntra #ZeroTrust

Public preview of require authentication strength in #AzureA is now live. I spent some time digging into this with #ConditionalAccess, examining the behavior, and documenting the expected and unexpected. #Entra #InfoSec #Identity #AAD #passwordless

🎯 Configure targeting once, organize multiple security requirements, and cut down repetitive work! Microsoft #EntraID brings a new approach to #ConditionalAccess management with policy plans. Read here: #AdminDroid #Microsoft365

Managing Conditional Access policies can get messy. I built a PowerShell script to help you: ✅ Export CA configs ✅ Flag common issues ✅ Link right back to each policy ✅ Spot hidden risks Demo vid 👉 Script 👉 #ConditionalAccess

A great introduction to Conditional Acces Zero Trust Architecture and best practices. [Guide] Conditional Access architecture and personas #CyberSecurity #ConditionalAccess #BestPractices #shiftavenue

🚨New blog post How to safely go from report-only to enforced mode ✅ ✔ Ring-based rollout ✔ What If & Policy Impact ✔ Log Analytics + KQL ✔ Zero lockouts Read before you press “ON”. 🔗 #EntraID #ConditionalAccess #IdentitySecurity #CloudSecurity

You wait ages for a #ConditionalAccess blog and two come along @mike_marable. Just Dropped In (To See What Condition My Conditional Access Rule Was In): Part 10 – Require multifactor authentication for Microsoft admin portals (Preview) #MSIntune #MVPBuzz

Device code phishing is quietly becoming one of the more effective techniques targeting #M365 environments. In our latest #blog, Lumi Taiwo and Danny Dubree detail how it works and the #ConditionalAccess controls that shut it down. Read it now!

I've discussed the following issue regarding #ConditionalAccess with a lot of folks now. If you are using the "MFA for all users" template and you don't exclude the Store your Windows devices will fall back to Pro SKU if the users log in with a password.

Microsoft is introducing #AzureAD "Security defaults" for every organization. Nice option to easily enforce Microsoft's recommended #ConditionalAccess policies in free or basic tenants. Very similar to the (already known) baseline policies.