(Pass) Keys to a Passwordless Future
(Pass) Keys to a Passwordless Future

Shouldn’t there be huge demand for an alternative to passwords? The frequency of phishing attacks is constantly increasing, and even bypassing multi-factor authentication is becoming more common (Evilginx says hello). Maintaining and using password managers is also not a pleasant task – so why do we, as the first security measure, use our fingers to... » read more

Theatre Against Overprivilege: PAM Edition – Theory
Theatre Against Overprivilege: PAM Edition – Theory

Raising the Curtain There are some things that regularly bother me – for example, I often wonder how all the Entra ID API rights demanded by applications are justified. I have spent quite some time with the Privileged Access Management piece – but let’s not get ahead of ourselves, first let’s get to know our... » read more

Diving into Entra ID systemLabels
Diving into Entra ID systemLabels

The Original Question I came here for an Answer, not some Blog Post! Okay geez, head directly to the GitHub Repo Maybe come back though, The journey is its own reward… One of my colleagues did not understand why Dynamic Groups were not being Processed and asked for help – Assumption being, that systemLabels referred... » read more

How do I (re)set Entra ID Passwords with PowerShell? (2023)
How do I (re)set Entra ID Passwords with PowerShell? (2023)

The Legacy Problem When this question is asked, the most common answers online unfortunately still use old PowerShell modules (Azure AD, Azure AD Preview, MSOL), which are being deprecated To try and help remedy this I have collected some solutions using the PowerShell Graph SDK. ! Necessary permissions are best found using Find-MgGraphCommand "<CmdLet>" Change... » read more

Working with Entra ID Directory Extensions
Working with Entra ID Directory Extensions

Entra ID Directory Extensions Have you ever wanted to save information in Entra ID, but couldn’t find an appropriate attribute to store your data? For example, storing someones nickname in a usable fashion? Or you need a specific attribute from your HR Software for Single Sign-On or authorization? Or for Dynamic Groups? If you have... » read more