Brandon Colley

In case you haven’t heard by now, there was quite the buzz recently in the Entra community when the ConnectWise backup application was the source of a supply-chain attack. Huntress reported that attackers obtained the ConnectWise app credentials. They used those credentials to authenticate to more than 170 Microsoft Entra tenants. Every multi-tenant app has…

I’ve been helping organizations harden Microsoft Entra ID for the last 5 years and given multiple talks on finding holes in Conditional Access. This month, I did some research into Device Platforms, testing a misconfiguration I find in almost every tenant. In my testing, a sign-in with an unclassified platform fell outside every Conditional Access…

Entra Connect is well known as the application responsible for synchronizing on-premises Active Directory (AD) identities to the Entra Cloud. This service is not only integral to an environment’s operational health, it must be on your security radar as it straddles two trust boundaries and is the authority for your hybrid identities. All too commonly,…

Talk about AI and agents has swept the tech industry for the better part of a year, and organizations have shifted from “how can we leverage AI” to “how can we control it.” Microsoft now steers agent integration through Entra Agent ID and Copilot Studio, and vendors like Anthropic are moving the same way with…

Implementing passkeys in Microsoft Entra is far more than simply enabling a new authentication method. A successful passkey rollout requires careful planning and coordination. One of the most important aspects of a passkey deployment is using Conditional Access to enforce their use. This article isn’t about how to turn passkeys on but about what tends…