7 min read
Microsoft Can Add a Graph Permission Tomorrow and Nobody Will Email You
Microsoft publishes new Graph permissions without advance notice, and your consent policies make decisions about them before you do. Here's the PowerShell…
Azure
7 min read
Microsoft publishes new Graph permissions without advance notice, and your consent policies make decisions about them before you do. Here's the PowerShell…
Microsoft Can Add a Graph Permission Tomorrow and Nobody Will Email You
4 min read
Microsoft has shipped refresh-token transfer to general availability for Entra External ID, letting Apple Watch companion apps inherit their iPhone app's session…
Your Apple Watch app can finally stop asking customers to log in twice
8 min read
Microsoft's new Multicloud Interconnect solves the multi-vendor SLA problem for Azure-to-AWS traffic. It doesn't solve the egress bill, the split control plane,…
Three things Multicloud Interconnect doesn’t fix — and the one it actually does
7 min read
The memberOf property has been the standard way to check group membership in Entra for years. Now Microsoft is retiring it, and…
Microsoft is retiring memberOf: how to fix your group-lookup automation
7 min read
Nothing tanks a checkout funnel like forcing users to log in twice. Microsoft's new GA feature passes native app sessions to embedded…
I tested Entra’s new native-to-webview SSO. Here’s which handoff actually wins
4 min read
AKS pods can now authenticate to Azure Files SMB shares using federated identity credentials instead of cluster-wide managed identities or storage account…
Azure Files CSI driver adds workload identity for AKS SMB mounts8 min read
App-centric management finally lands in the DoD cloud in October 2026, and it quietly retires the app permission policy model your governance…
DoD Tenants Are Losing App Permission Policies — Here’s the App-Centric Migration You Can’t Ignore6 min read
Microsoft quietly shipped getNotebookFromWebUrl to Graph v1.0. The method is trivial. The permission it rides on — Notes.ReadWrite.All granted to some forgotten…
A Two-Line OneNote Changelog Is Really a Notes.ReadWrite.All Audit You’ve Been Skipping7 min read
Teams Admin Center will soon let admins one-click enable agents for apps you already own. Behind that button sits a pile of…
Every Third-Party App in Your Tenant Is About to Grow an Agent. Audit the Consent Grants First.8 min read
Microsoft quietly added Financials APIs for Dynamics 365 Business Central to Graph v1.0. It shows up in the Entra feed for a…
A Business Central API Just Landed in Your Graph Permission Surface — Here’s the Consent Problem Nobody’s Auditing