Entra 🆔 News #92 → This week in Microsoft Entra

🧑‍✈️ Dive into App Risk with Security Copilot 👾, IKEA's Entra game plan ♟️☁️, Private Access PoCs 🧪🔗, and more! 🚀

👋 Hi, Merill and Joshua here with this week’s roundup of the latest news on Microsoft Entra from around the globe 🌍.

Martin Sandren, IKEA’s Identity Lead joined me on the Entra.Chat podcast for a fascinating discussion on how Ikea uses Entra.

Get the podcast today 👇 and please leave a review if you like the show 🙏

🎧 Apple Podcast | 📺 YouTube | 📺 Spotify | 🎧 Overcast | 🎧 Pocketcast | 🎧 Others

Enjoy!

---

Sponsored by:

EasyEntra: Empower First-Level Support to Work Efficiently

Managing standard first-level user support in a hybrid environment is overly complex. To handle even basic tasks, your team needs expertise across multiple platforms like ADUC, Exchange on-premises Admin Center, M365 Admin Center, Entra Admin Center, EXO Admin Center, EXO PowerShell, and Entra Connect PowerShell.

EasyEntra eliminates this complexity and allows first-level support to work without headaches:
✅ Intuitive – The interface mimics the familiar AD Users & Computers layout.
✅ Consolidated – Manage all user settings from a single-pane-of-glass.
✅ Responsive – Preloads all properties for lightning-fast navigation of settings.
✅ Reduces junior IT training – Onboard junior IT staff in minutes.
✅ Protects senior IT staff – Prevent first-level support tickets from escalating.

---

⚡️ Microsoft

📖 Read

• April 2025: A look at the latest Microsoft Entra key feature releases, announcements, and updates • James Casey

📺 Watch

• 425 Show | Global Secure Access Proof-of-Concept Deep Dive • Luis Flores

🗣️ Message Center

• 08 Apr - MC989965 - (Updated) Microsoft Entra: Updated "More information required" user interface during authentication method registration

• 08 Apr - MC1050723 - Microsoft Entra ID: Update to user sign-in with Microsoft Authenticator Lite and Microsoft Authenticator app

• 08 Apr - MC1041454 - AI Admin role has permissions to manage Copilot agents

---

From the community…

🚀 Most popular posts from last week

• 🥇Using Conditional Access to Combat Token Theft • Tony Redmond

• 🥈How FIDO2 works, a technical deep dive • Michael Waterman

• 🥉12 Common Microsoft Entra ID Issues & Fixes for Admins • AIMA

---

Sponsored by:

Secure Your Azure Services with the Entra ID Threat Model

Microsoft Entra ID is the foundation of your Azure security—but do you have the right controls in place to satisfy your risk appetite?

The Entra ID ThreatModel empowers you to:
✅ Prioritise your control implementation based on threats and risk exposure
✅ Map & mitigate attack techniques with MITRE ATT&CK
✅ Strengthen security controls with tested validation procedures
✅ Align controls with 318+ frameworks for compliance and regulatory coverage

🎯 Get a free preview with 3 selected threats.

---

Have you voted 👇

---

☀️ Learn

⛑️ ID Protection

• Managing User and Sign-in Risk for Passwordless Accounts with Microsoft Entra ID Protection • Sreejith Reghunathan Pillai

👮‍♂️ ID Governance

• Managing Restricted Groups with Access Packages • Nathan McNulty

• Access Reviews: Spring Cleaning for Your Entra Groups • Dustin Gullett

🌐 Private Access & Internet Access (GSA)

• Entra Private Access and the future of the Entra App Proxy • Chris Brumm

• Quick Look at Entra ID Global Secure Access – Private Access • Mohammed Sajid

📦 Apps

• Improving The Model Context Protocol Authorization Spec - One RFC At A Time • Den Delimarsky

• How to find non-privileged applications owners in Microsoft Entra • Daniel Bradley

• Identifying Service principal-less authentication • Rakhesh Sasidharan

• Entra Service Principal mind map • Kevin Kisoka

🔑 Authentication

• MFA Beyond Push Notifications • Brian Baldock

🤖 DevOps & PowerShell

• Using an MCP agent to query Entra with natural language. • John Schnobrich

• Working with custom attributes via the Graph SDK for PowerShell and the Entra module • Vasil Michev

• Practical Graph: Running Audit Log Searches with the AuditLog Query API • Andy Schneider

• Set-MgUserLicense: One or more parameters of the operation ‘assignLicense’ are missing. • Kavya

• Use the Azure Arc Managed Identity with Azure PowerShell • Thomas Maurer

🚦 Conditional Access

• Enhancing Security with Microsoft Entra Protected Actions and Conditional Access • Oliver Müller

🖥️ Devices

• On-premises printing with cloud native devices • Gerry Hampson

• The Continue to Sign in Prompt That breaks the SSO • Rudy Ooms

• Passwordless RDP Authentication for On-Prem Servers with Smart Cards (FIDO2 Security Key) • Farooque

• This Is Not Just Another LAPS Post…Promise! • Dustin Gullett

🏙️ External ID - Guests & Multi-Tenant Organizations

• Practical Protection: Auditing Guest Access in your Microsoft 365 Tenant • Andy Schneider

🥷 Security

• The Growing Threat of Token Theft: How Attackers Exploit Stolen Authentication After Successful Phishing • Toby G

• How to Configure an Emergency Access App in Entra ID • Lokesh

• Exploring Publicly Accessible Entra ID Tenant and User data • Mateusz Jendza

♻️ Sync

• Deploying Microsoft Entra Self-Service Password Reset in a Hybrid Environment with PowerShell • Mecken Swyter

• How to Install & Configure Entra Cloud Sync • Rudy Mens

• Entra Connect vs Cloud Sync – What is the Difference? • Rudy Mens

📒 Tenant Configuration

• Are Microsoft E5 Licensing Add-Ons a Good Deal? • Tony Redmond

• Comprehensive Guide to Configuring Advanced Auditing • Nathan McNulty

• How to Change onmicrosoft.com Domain in Microsoft 365 • Ali Tajran

• Extracting Tenant ID from Azure Subscription ID • Jay Kerai

🛍️ External ID - Customers

• Validating the ID and Access JWT signature in Entra External ID • Rory Braybrook

---

⚒️ Toolkit

• M365 License Assignment Report • Roy Klooster

• uniQuk/EntraOATH - PowerShell module for managing hardware OATH tokens in Microsoft Entra ID • Josh

• Invoke‐EasyPIMOrchestrator - A comprehensive solution for managing Privileged Identity Management (PIM) assignments across Azure, Entra ID (formerly Azure AD), and Groups • Loïc Michel

---

🎙️ Podcasts

• Application Risk in Security Copilot with Ari Schorr • Ari Schorr, Richard Campbell

• Considerations when services are being deprecated - Ctrl+Alt+Azure • Tobias Zimmergren, Jussi Roine

---

📺 Watch

• Microsoft Entra MADE EASY For Beginners! (53 min) • Jonathan Edwards

• Is macOS Platform SSO any good yet? (19 min) • Dean Ellerby

• Device Code Login Phishing Presentation Attack, Detect, Mitigate (30 min) • Ippsec

---

🔥 Maester

• Maester results on Azure Web App! • Sebastian Claesson

• Maester - Azure DevOps optimizations • Jiří Vaculik

---

👨🏽‍💻 Merill’s corner

• cmd.ms — the Microsoft Cloud command line! • Brian Veldman

---

• Want to get featured on Entra.News? → Submit your content 😎

• Want us to say nice things about your company? Sponsor entra.news 🤩

---

---

🪃 Acknowledgement of Country

Entra.News is created on Wurundjeri land and acknowledges the traditional owners of country throughout Australia, recognising their continuing connection to land, water and community. We pay our respect to them and their cultures and to elders both past and present.