Folks,
Big week in the Entra world. Device code phishing is still everywhere, there’s a fresh look at Conditional Access gaps, and someone finally declared Active Directory dead (I’ll let you guess how I feel about that one 😄).
Some personal news. I’m now working with Increment as Product Manager for IDFusion.
I’ll also be at Ignite this year! You’ll most probably find me hanging out near the Entra booth and sessions (of course). Come say hi.
More on the new gig in my post below in Merill’s corner.
And no, I’m not going anywhere on Maester and Maester Cloud. I’m still all in. In fact we’ve got some huge previews coming in Maester 3.0. Check out the post below for a first look.
Let’s dive in.
Conditional Access Gaps and the App Back Door, with Brandon Colley
Most Conditional Access gaps aren’t exotic. They come from reading policies the wrong way: as firewall rules with an “allow”, as a list of platforms that seems complete, as an MFA exception for the office that made sense years ago. Brandon Colley has reviewed well over a thousand Conditional Access policies in customer assessments, and the same handful …
Sponsored by:
EasyEntra: Consistent AD Values as You Type
“Sales & Marketing” or “Sales and Marketing”?
First-line support doesn’t get AD values wrong on purpose. They just lack an easy way to see the naming conventions already in use in your Active Directory.
EasyEntra’s new AD attribute autocomplete matches your input against existing AD values for 24 key attributes.
Start typing, select a value from the suggested drop-down, and move on.✅ No digging through other accounts.
✅ No configuration needed.
✅ Available out of the box.Give your helpdesk the insights they need to keep AD consistent with zero effort. Fewer naming variations, less cleanup, and faster daily support.
Pay your helpdesk to solve tickets. Not memorize department names.
⚡️ Microsoft
🏆 General Availability
Determine whether Microsoft revoked the credential of an Entra ID Application - Troubleshoot revoked application credentials
🔥 Public Preview
Manage provisioning object connections using Microsoft Graph (Preview)
New pre-requisite for Entra Connect Cloud Sync provisioning agents - Administrators should verify the site and DNS configuration for servers hosting provisioning agents.
📖 Read
Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks • Microsoft Security Research
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise • Microsoft Security Research and Microsoft Threat Intelligence
🗣️ Message Center
MC1519855 - Microsoft Entra: Choose your own telephony provider for SMS and voice authentication
MC1506733 - Action may be required: Review who can create agents in Microsoft Entra
Sponsored by:
Simplify complex Entra ID migrations with PowerSyncPro
PowerSyncPro helps organisations reduce risk, minimise disruption, and deliver successful identity, directory, and workstation migrations with confidence. From coexistence and directory synchronisation to endpoint migration, PowerSyncPro is built for complex transformation projects.
Want to strengthen your migration expertise?
The PowerSyncPro Certification Programme helps IT professionals and migration specialists build practical skills across PowerSyncPro solutions. With Fundamental, Intermediate, and Advanced tracks, you can demonstrate your expertise through certification and share your achievements with digital badges.
Whether delivering migrations for your organisation or your customers, PowerSyncPro provides the technology and training to help you succeed.
Learn more about PowerSyncPro
Enquire about certification
From the community…
🚀 Most popular posts from last week
🥇 How to speed up PIM activations in Microsoft Entra ID • Daniel Bradley
🥈 M365Permissions v2.2.0 released! • Jos Lieben
🥉 Restrict Access to Microsoft Entra Admin Center: The Toggle That Locks Nothing • Mark Oldham
☀️ Learn
👩✈️ AI & Copilot
Connecting Claude to the Entra MCP Server • Klaus Bierschenk
Control who can create agent blueprints in Microsoft Entra • Tobias Asböck
📺 Introducing new Microsoft 365 E7 and Project Perception capabilities. • Microsoft Security
📺 Microsoft 365 ME7 and Project Perception • Microsoft Security
💳 Verified ID
Using Verified ID with Entra External ID (EEID) • Rory Braybrook
🧰 Workload ID
⛑️ ID Protection
Entra ID Protection now flags suspicious credential additions • Daniel Bradley
👮♂️ ID Governance
🌐 Private Access & Internet Access (GSA)
Universal Tenant Restrictions • Christopher Brumm
Entra – New version available for Global Secure Access client for Windows devices • Benoit HAMET
Source IP Anchoring with Private Network Connectors • Andy Kemp
MC1507808: Require Risk Remediation Policy - What to Do • Thomas Marcussen
📦 Apps
Hitting the Claims Mapping Policy 50 Limit in Entra ID • Matt Jacobs
App Registrations and Enterprise Apps: What the Entra Object Model Actually Looks Like • Jonathan Hope
Authentication
I.D.E.A. #005: Open hunting season on SMS • Per-Torben Sorensen
largeBlob: the storage inside your FIDO2 key • Dr. Emin Huseynov
👥 User & Group Management
📺 Migrating From Active Directory. to Entra ID Cloud Native • Andy Malone
🤖 DevOps & PowerShell
🚦 Conditional Access
Conditional Access Gaps and the App Back Door, with Brandon Colley • Merill Fernando
What are Conditional Access Plans? • Daniel Bradley
🖥️ Devices
🏙️ External ID - Guests & Multi-Tenant Organizations
(2026-10-23) How A Entra ID Guest Account Can Keep You Somewhat “Hostage” • Jorge de Almeida Pinto
🥷 Security
Device Code Phishing: Prevention, Detection and Response • Christopher Brumm
It Happened to Me: When a Breach Became Personal • Mike Palitto
When the Trusted App Is the Attacker: Lessons from the ConnectWise Cloud Backup Compromise • Matej Klemenčič
♻️ Sync
Active Directory is finally dead • Spencer Alessi
🔥 Maester
👨🏽💻 Merill’s corner
I’ve started publishing a series of short 7 minute clips on various aspects of Entra ID security. Subsribe on YouTube at https://youtube.com/@merillx
Want to get featured on Entra.News? → Submit your content 😎
Want us to say nice things about your company? Sponsor entra.news 🤩
Love the newsletter? Tell us 💚❤️💜
🪃 Acknowledgement of Country
Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.