Topic
Microsoft-provided SMS and voice authentication retires February 1, 2027, and automatic passkey migration starts September 1, 2026. Here is the migration order for MSPs.
CloudCapsule's new Manage tier adds Quick Fixes, 100+ policy deployments, a reusable Policy Library, outcome-based Capsules, and Explorer, so multi-tenant M365 remediation happens in one place.
Always-on GDAP roles hand an attacker every customer tenant your techs can reach. PIM for Groups turns that into just-in-time access with MFA, approvals, and an audit trail.
A HaloPSA self-service form, one webhook, and a Power Automate flow per tenant turn user onboarding into a hands-off process. Here is the full build, including the ROI math.
CIPP and Microsoft 365 Lighthouse both beat Partner Center for multi-tenant management. Here is the full comparison across twelve categories, with a downloadable matrix and a clear verdict.
App secrets and refresh tokens hardcoded in scripts are a breach waiting to happen. Two scripts to load Secure Application Model secrets into Azure Key Vault and pull them at runtime for headless automation.
Personal-device access does not have to be negotiated client by client. Define three BYOD support tiers once, then deploy the matching Conditional Access, MAM, and DLP stack everywhere.
Lighthouse now flags which customers are ready to buy Microsoft 365 Copilot. Here is how to size the revenue, time the pitch to NCE renewals, and open with an AI readiness assessment.
Microsoft-managed Conditional Access policies land in tenants automatically, Entra ID preps device-bound passkeys, Ignite floods Teams with Copilot, and Intune unveils two paid add-on capabilities.
When you widen an app registration's Graph permissions under GDAP, every customer relationship needs the matching role. Here is the architecture and script that updates them all at once.
GDAP removes the pre-consent that delegated vendor integrations rely on. Here is the split of work: the prerequisites the MSP configures and the consent workflow the vendor has to build.
GDAP removes the pre-consent that made partner app registrations just work. Here is the full repair path: service account, app registration, GDAP roles, and the consent API, with scripts.
