Guides about Entra ID
9 guides on this topic.
- Microsoft 365Compromised Microsoft 365 account: what Microsoft's response guide describesThe steps Microsoft, ASIC and the ACSC describe for a compromised Microsoft 365 (Office 365) account: contain it, remove the foothold, investigate, report.
- Microsoft 365Guest access and external identities in Microsoft 365How Microsoft 365 guest access works, as Microsoft describes it: B2B guest users, who can invite guests, Teams and SharePoint settings, and access reviews.
- Microsoft 365Microsoft 365 admin roles and least privilege explainedMicrosoft 365 admin roles and least privilege as Microsoft describes them: Global Administrator limits, break-glass and separate admin accounts, and PIM.
- Microsoft 365Microsoft 365 MFA methods compared, from SMS to passkeysPhishing-resistant MFA in Microsoft 365: the sign-in methods Microsoft calls phishing-resistant, those it calls prone to phishing, and ASD's view of SMS.
- Microsoft 365Microsoft 365 security baseline: the settings Microsoft's guidance coversA Microsoft 365 security checklist based on Microsoft's documentation: MFA, legacy sign-in, admin accounts, email, sharing, audit logs and licence notes.
- Microsoft 365Microsoft Entra ID basics for Microsoft 365 tenantsWhat Microsoft Entra ID is and how it works in a Microsoft 365 tenant, in plain English: users, groups, admin roles, sign-in logs and Conditional Access.
- Microsoft 365Security defaults vs Conditional Access: how they differMicrosoft 365 security defaults vs Conditional Access: what each enforces, the licences Microsoft lists, and the steps Microsoft describes for switching.
- Microsoft 365Token theft and session security in Microsoft 365How Microsoft 365 token theft and AiTM phishing work, why MFA alone may not stop them, and the mitigations Microsoft documents, such as token protection.
- Microsoft 365App consent in Microsoft Entra ID and consent phishing, explainedHow Entra ID user consent settings and the admin consent workflow work, and how consent phishing gets malicious apps access to Microsoft 365 data.