Entra ID, MFA, Conditional Access, token theft, and privileged access. Identity is the number one breach vector in Microsoft 365 and the first pillar of tenant security.
GDAP forces a question DAP never asked: which Azure AD roles do your techs actually need per customer? A practical baseline, the architecture behind it, and what to do about Global Admin.
GDAP replaces permanent Global Admin access to every customer tenant with granular, time-bound roles. Here is what changes for MSPs, announced November 2021.
Per-user MFA, Conditional Access, and Security Defaults each report enrollment differently. Here is how they interact, plus a PowerShell script that documents MFA across every customer tenant.
Federating an Azure AD domain to Apple Business Manager lets users sign in with their existing Azure AD credentials and creates Managed Apple IDs automatically. Here is what it unlocks.
Azure AD Connect Cloud Sync is a lightweight agent that finally syncs multiple disconnected forests into one tenant. Here is where it wins for MSPs and where it still falls short.
Microsoft retires baseline policies and enforces Security Defaults on February 29, 2020. Here are two ways to require MFA without breaking your copiers, ticketing systems, and PowerShell.
An Azure Logic App can pull Microsoft Graph security alerts on a timer and post them to a Teams channel with no scripting. Here is the build, the cost, and where it falls short.
Register a Graph Security app, drop a webhook into Teams, and schedule a PowerShell script to post every M365 and Azure security alert across your tenants at zero running cost.
AD Connect dirsync errors and duplicate users almost always trace back to attribute and prep mistakes made before the first sync. Here is the pre-sync checklist that prevents them.
