Posts

Making Email Optional in Microsoft Entra External ID: Why This Matters for Modern CIAM

-
In customer identity, flexibility isn’t just a convenience it’s a requirement. As organizations expand globally and integrate with diverse identity providers, the assumption that every user has (or wants to provide) an email address is increasingly outdated. Microsoft Entra External ID now supports a small but powerful capability: making the email attribute optional during sign‑up when users authenticate through a federated external OIDC provider . This change helps organizations deliver more inclusive onboarding experiences while maintaining strong identity assurance. Why Email Became a Bottleneck By default, Entra External ID expects an email claim during sign‑up. When an external IdP doesn’t provide one, users hit the error: “AADSTS901011: No email address was obtained from the external OIDC identity provider during sign-up.” This is common with: Government or national digital identity systems Enterprise IdPs that rely on employee numbers or unique subject ...
Post a Comment
Read more

Project Perception: Microsoft’s Autonomous Red, Blue, and Green AI Workforce for Cyber Defense

-
Image
Cybersecurity has entered a new era- one where defense is no longer reactive, manual, or bottlenecked by human capacity. Microsoft’s Project Perception introduces a groundbreaking shift: a fully autonomous, multi‑agent AI workforce that operates across the entire attack lifecycle at machine speed. This isn’t just automation. It’s a coordinated team of specialized agents: red, blue, and green working together continuously to expose gaps, investigate threats, and remediate issues without hand‑offs or delays. A Multi‑Agent System Built for Continuous Defense Microsoft describes Project Perception as: “A workforce of specialized AI agents… that reason across your security data, tools, and workflows to expose gaps, investigate threats, and remediate them continuously.” This workforce is built on three pillars: Intelligence : real‑time context, signals, and threat insights Agents : red, blue, and green roles across the attack lifecycle Models : purpose‑buil...
Post a Comment
Read more

No Guest? No Problem: Direct External Assignments in Microsoft Entra

-
Image
Microsoft has introduced a significant enhancement to Entra ID Governance: Direct Admin Assignment for External Users Using Only an Email Address . This feature streamlines how organizations onboard external collaborators into governed access packages, removing long‑standing friction in B2B onboarding workflows. A Shift in How External Access Is Granted Historically, assigning external users to access packages required one of two steps: The external user had to already exist as a Guest in the tenant, or The external user had to request access through a connected organization or self‑service flow. This created operational overhead for administrators who needed to onboard partners, contractors, or one‑off external identities quickly. The new capability changes that model entirely. What the New Feature Enables Administrators can now: Enter an external user’s email address directly during access package assignment. Entra automatical...
Post a Comment
Read more

How Entra Private Access Can Stop Hotel Hackers

-
Image
Checking-in to your hotel soon? You may have read recently that hackers have unleashed a campaign against various hotels, resulting in compromise of work accounts. In this attack, hackers take advantage of manipulating users into providing their credentials and hijacking their session. Albeit this is nothing new, it is a reminder that strong authentication and security throughout the pipeline is crucial to ensure a user's security. What is different however, is Microsoft Entra Private Access. In this article, I'll explain what happened, and how Entra Private Access could've protected these end users. What Happened? On July 24th, a report from BleepingComputer highlighted that various hotel chains have become victim of attackers compromising Microsoft 365 accounts through DNS Poisoning. Attackers first gained admin access to hotel or conference-center Wi-Fi appliances through exposed management interfaces, weak or reused credentials, and unpatched firmware. Once they we...
Post a Comment
Read more

HEADS UP: The 2027 Microsoft MFA Shift Is Coming - What You Need To Do Now

-
Microsoft is making one of its most significant identity security changes in years: retiring Microsoft‑provided SMS and voice authentication on February 1, 2027 . For many organizations, this will be a major transition and the timeline is tighter than it looks. If you’re an IT admin, identity engineer, or security leader, this shift isn’t just a technical update. It’s a strategic moment to modernize your authentication stack, reduce risk, and prepare your users for a passwordless future. Below is a clear, actionable breakdown of what’s changing and how to get ahead of it. Why Microsoft Is Retiring SMS & Voice MFA SMS and voice codes have long been the “easy button” for MFA enrollment. But they’re also the least secure : Vulnerable to SIM swapping Easily intercepted through phishing Increasingly targeted by AI‑powered social engineering Difficult to guarantee across global telecom networks Microsoft’s data shows that modern phishing kits can bypass SMS/voice MFA with alarming s...
Post a Comment
Read more

Windows BYOD Is Awesome- Here's Why and How

-
Image
For years, organizations have asked a simple question: Why can every platform except Windows do lightweight BYOD? In July 2026, Microsoft finally delivered the missing piece. The new BYOD Support for Windows (now generally available) brings Windows into the modern identity era. No domain join. No Intune enrollment. No heavy-handed device management. Just clean, identity-first access for unmanaged Windows devices. And it’s a bigger shift than most people realize. Why This Matters Organizations have been stuck between two extremes: Fully managed Windows devices (great security, heavy overhead) Guest access with no device context (lightweight, but limited and risky) The new BYOD Windows model creates a third path: Identity-driven access with lightweight device registration. This means users-internal or external can register their Windows device with Entra and securely access corporate resources without being forced into full management. It’s the same model that’s worked for iOS, Andro...
Post a Comment
Read more