Microsoft Entra ID: Why Identity Is the New Security Perimeter

There was a time when the corporate network represented a reasonably clear security boundary.

Employees worked inside an office.

Servers lived in company data centers.

Workstations joined corporate Active Directory.

Firewalls separated the internal network from the internet.

Cloud computing fundamentally changed that model. Continue reading →

Conditional Access Explained: Securing Access to Microsoft 365

As organizations move applications and data to the cloud, the traditional corporate network becomes less effective as the main security boundary.

Employees may sign in from the office, from home, from a mobile phone, or from a company laptop in another country. This makes identity one of the most important parts of modern IT security.

One technology administrators should understand is Conditional Access. Continue reading →

How to Investigate Failed Microsoft 365 Sign-Ins

One of the most common tickets an administrator receives is deceptively simple:

“I can’t log in.”

That statement doesn’t tell us very much.

An authentication problem could involve:

  • Incorrect credentials
  • MFA
  • Conditional Access
  • Device compliance
  • Account status
  • Authentication methods
  • Application access
  • Risk-based controls

Continue reading →