Real World Microsoft Security
Entra ID, Intune, and Microsoft 365 security, from someone who actually runs this stuff.
What I’ve learned securing Entra ID, Intune, and M365 in production, written down so it’s useful to someone else.
Latest
-
Token Protection for Web Apps First Look and Wackiness
Remember the asterisk back in Part 1? Token Protection earned one in the mitigation table, right next to a note that it doesn’t do much for you in a browser.…
-
Agent Identities Are Not Service Principals
Head on over to your audit logs and filter the last 30 days on “Add service principal.” Some of those…
-
Breaking Up with Your IdP: A Practical Guide to De-Federating from Third-Party Identity Providers
It seems like weekly now, I’m being pulled into conversations with customers who want to “break up” with their third-party…
-
Conditional Access Boot Camp
Conditional Access is one of the best tools in your Microsoft environment for securing access. With it, you can control…
-
AiTM attack mitigation in M365 – Part 1
AiTM attacks have always been that annoying mosquito that just won’t go away. In 2025 and into 2026, that mosquito…