8 min read
The onboarding script made 40 meetings and none landed in a channel
Microsoft Graph has exactly one way to create a meeting programmatically, and it produces a private meeting every time. Here's the workaround…
Entra ID
8 min read
Microsoft Architect: Active Directory Is 10x Harder to Defend Than Entra ID
When someone DCSync's your directory at 2 a.m., three questions matter: what did they take, how far did they get, and how…
7 min read
The 90-Day Secret Rotation Ticket Is Now Optional Across Tenants
Managed identities can now authenticate to app registrations across tenant boundaries using federated credentials. The GA release means you can finally delete…
4 min read
The custom Apple OIDC connector is dead. The built-in provider won.
Apple identity federation is now generally available in Entra External ID. Here's the name-claim gotcha that cost me a week in production.
4 min read
Native Authentication moves the password prompt off Microsoft’s domain and into your SPA
For fifteen years, you didn't handle the password—you redirected to Microsoft and got back a token. Native Authentication for Entra External ID…
6 min read
Three Things That Break the First Time You Ship a Conditional Access Policy as Bicep
Microsoft's Bicep extension for Entra ID went GA in July 2025. Here's what actually happens when you try to version-control a Conditional…
7 min read
GM Retired 200,000 Passwords. The Hard Part Was the Helpdesk Script.
GM moved 200,000 employees to passkeys. The deployment blueprint isn't the authentication method toggle—it's the Temporary Access Pass rail, device-loss runbook, and…
8 min read
Google, Facebook and Apple login now works inside your app — no browser bounce
The ugliest part of mobile sign-in has been the bounce to a system browser and back. Entra External ID just shipped GA…
4 min read
Your Apple Watch app can finally stop asking customers to log in twice
Microsoft has shipped refresh-token transfer to general availability for Entra External ID, letting Apple Watch companion apps inherit their iPhone app's session…
6 min read
A Two-Line OneNote Changelog Is Really a Notes.ReadWrite.All Audit You’ve Been Skipping
Microsoft quietly shipped getNotebookFromWebUrl to Graph v1.0. The method is trivial. The permission it rides on — Notes.ReadWrite.All granted to some forgotten…