7 min read
The Three Scripts I Found Injecting Themselves Into Our Entra Sign-In Page
When I went looking for scripts that might break when Microsoft hardens Entra's sign-in page, I started in the wrong place. The…
Entra ID
4 min read
Three Things Nobody Audited When a Coding Agent Made a Client Secret at 2 a.m.
AI coding assistants are auto-generating Entra app registrations with client secrets at 2 a.m. Here's how to audit what already exists and…
7 min read
Microsoft Is Cutting Windows PowerShell 5.1 Loose From the Graph SDK
The access review export doesn't arrive Monday morning, and when you run the task manually it dies with an assembly-loading error you…
3 min read
GitHub’s New Auth Preview Only Works With Entra ID Right Now
The source material is sparse, but the exclusivity is real: if your shop runs Okta or Google as the primary IdP, this…
4 min read
Platform-Based Conditional Access Rules Don’t Block Unknown Devices—Block by Default Instead
Legacy browsers, custom user-agents, and certain API clients don't report a device platform to Entra ID—and your platform-scoped Conditional Access rules ignore…
6 min read
Unclassified Devices Slip Past Every Platform-Scoped Conditional Access Policy You Own
Policies scoped to Windows, iOS, or Android skip every device that reports a platform Entra doesn't recognize—and almost every tenant has this…
4 min read
Your Graph Script Isn’t Fast, the SDK Is Just Swallowing the 429s
The Microsoft.Graph SDK's retry handler silently absorbs throttle delays, making scripts appear fast when they're spending minutes waiting on 429 responses. Here's…
6 min read
How to find large mailbox items without downloading them all
The obvious move is to pull every message and sort by size in PowerShell. Do that against a 90,000-item mailbox and you'll…
3 min read
SMS Sign-In Dies in Entra ID in February 2027
Microsoft isn't killing SMS multi-factor authentication. It's killing SMS as a primary sign-in method—the passwordless flow where a phone number and code…
6 min read
Passkeys for B2B Guests Landed—Three Reasons You Still Can’t Turn Off Passwords
Passkey support for external users closes a major gap—but it doesn't hand you control over what partners actually deploy. The boundary between…