https://www.solvingmicrosoft365.com/guides/category/identity New and reviewed Microsoft Entra (Identity) guides. Identity, authentication, Conditional Access, PIM, and governance. en Solving Microsoft 365 Sun, 06 Sep 2026 08:00:00 GMT https://www.solvingmicrosoft365.com/guides/hybrid-identity-strategy https://www.solvingmicrosoft365.com/guides/hybrid-identity-strategy#2026-09-06 Sun, 06 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to plan the hybrid-identity journey from on-premises AD to Entra ID-only — staged, with the right choices at each stage. https://www.solvingmicrosoft365.com/guides/entra-id-conditional-access-design https://www.solvingmicrosoft365.com/guides/entra-id-conditional-access-design#2026-09-06 Sun, 06 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Designing a Conditional Access baseline: the policies, the principles, the order to write them in, and the habits that keep the estate healthy. https://www.solvingmicrosoft365.com/guides/entra-id-compromised-account-runbook https://www.solvingmicrosoft365.com/guides/entra-id-compromised-account-runbook#2026-09-06 Sun, 06 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Compromised Microsoft 365 account runbook: what to run in the first fifteen minutes, what to check in the first hour, and when it is safe to hand it back. https://www.solvingmicrosoft365.com/guides/identity-access-reviews https://www.solvingmicrosoft365.com/guides/identity-access-reviews#2026-09-04 Fri, 04 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How access reviews keep group memberships and role assignments healthy over time — periodic recertification at scale. https://www.solvingmicrosoft365.com/guides/entra-global-secure-access https://www.solvingmicrosoft365.com/guides/entra-global-secure-access#2026-09-04 Fri, 04 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Microsoft's SSE platform — Internet Access and Private Access for zero-trust network access. Here's what it does. https://www.solvingmicrosoft365.com/guides/entitlement-management-access-packages https://www.solvingmicrosoft365.com/guides/entitlement-management-access-packages#2026-09-04 Fri, 04 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How access packages bundle Microsoft 365 access into requestable, governed units — the modern way to provision access at scale. https://www.solvingmicrosoft365.com/guides/cross-tenant-synchronization https://www.solvingmicrosoft365.com/guides/cross-tenant-synchronization#2026-09-04 Fri, 04 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Cross-tenant synchronization auto-provisions B2B guests between Microsoft Entra ID tenants in a multi-tenant organisation. https://www.solvingmicrosoft365.com/guides/how-to-set-up-pim-for-global-administrator https://www.solvingmicrosoft365.com/guides/how-to-set-up-pim-for-global-administrator#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to set up Privileged Identity Management for Global Administrator in Entra ID: role settings, convert permanent admins to eligible, approvals, and alerts. https://www.solvingmicrosoft365.com/guides/how-to-reset-mfa-for-a-user-in-entra-id https://www.solvingmicrosoft365.com/guides/how-to-reset-mfa-for-a-user-in-entra-id#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to reset a user's MFA in Entra ID when they have a new phone or lost their authenticator: re-register, revoke sessions, and issue a Temporary Access Pass. https://www.solvingmicrosoft365.com/guides/how-to-require-mfa-for-all-users-with-conditional-access https://www.solvingmicrosoft365.com/guides/how-to-require-mfa-for-all-users-with-conditional-access#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to require MFA for all users in Entra ID with Conditional Access: the exclusions that matter, report-only rollout, registration campaign, enforcement. https://www.solvingmicrosoft365.com/guides/how-to-require-compliant-devices-with-conditional-access https://www.solvingmicrosoft365.com/guides/how-to-require-compliant-devices-with-conditional-access#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to require a compliant or hybrid-joined device with Conditional Access: the Intune compliance policy first, the grant control, exclusions, report-only. https://www.solvingmicrosoft365.com/guides/how-to-enable-self-service-password-reset-in-entra-id https://www.solvingmicrosoft365.com/guides/how-to-enable-self-service-password-reset-in-entra-id#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to enable self-service password reset in Entra ID: scope, methods, registration enforcement, password writeback for hybrid, and Windows lock-screen reset. https://www.solvingmicrosoft365.com/guides/how-to-create-a-break-glass-account-in-entra-id https://www.solvingmicrosoft365.com/guides/how-to-create-a-break-glass-account-in-entra-id#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to create an emergency access (break-glass) account in Entra ID: cloud-only, permanent Global Admin, excluded from Conditional Access, FIDO2 keys, alerting. https://www.solvingmicrosoft365.com/guides/how-to-bulk-assign-intune-configuration-profiles https://www.solvingmicrosoft365.com/guides/how-to-bulk-assign-intune-configuration-profiles#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to bulk-assign Intune configuration profiles: assignment groups, filters, All devices vs All users, exclusions, and a Graph script for many profiles. https://www.solvingmicrosoft365.com/guides/how-to-block-legacy-authentication-with-conditional-access https://www.solvingmicrosoft365.com/guides/how-to-block-legacy-authentication-with-conditional-access#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to block legacy authentication in Entra ID with Conditional Access: find who still uses it, build the block policy, run report-only, then enforce. https://www.solvingmicrosoft365.com/guides/how-to-assign-licenses-with-group-based-licensing-in-entra-id https://www.solvingmicrosoft365.com/guides/how-to-assign-licenses-with-group-based-licensing-in-entra-id#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to assign Microsoft 365 licences with group-based licensing in Entra ID: build the groups, set usage location, migrate direct assignments, fix errors. https://www.solvingmicrosoft365.com/guides/entra-suite-explained https://www.solvingmicrosoft365.com/guides/entra-suite-explained#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Entra Suite explained: Internet Access, Private Access, Verified ID, ID Governance, and Identity Protection in one licence — what each does and when it pays. https://www.solvingmicrosoft365.com/guides/entra-id-vs-ping-identity https://www.solvingmicrosoft365.com/guides/entra-id-vs-ping-identity#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Entra ID vs Ping Identity (PingOne, PingFederate, ForgeRock): federation depth, hybrid deployment, and CIAM against Entra's bundled workforce identity. https://www.solvingmicrosoft365.com/guides/entra-id-vs-okta https://www.solvingmicrosoft365.com/guides/entra-id-vs-okta#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Entra ID vs Okta as the identity provider: Okta's neutrality and app-integration depth against Entra's Microsoft 365 bundling and Conditional Access. https://www.solvingmicrosoft365.com/guides/entra-id-privileged-identity-management https://www.solvingmicrosoft365.com/guides/entra-id-privileged-identity-management#2026-09-03 Thu, 03 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) PIM turns standing admin access into just-in-time, approval-gated activation. The model, what it covers, role settings that work, and a rollout that sticks. https://www.solvingmicrosoft365.com/guides/hybrid-identity-retiring-on-prem-active-directory https://www.solvingmicrosoft365.com/guides/hybrid-identity-retiring-on-prem-active-directory#2026-09-02 Wed, 02 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) What still needs on-premises Active Directory in a Microsoft 365 organisation — Kerberos, file servers, RADIUS, printing — what replaces each, and the order. https://www.solvingmicrosoft365.com/guides/entra-sign-in-log-investigation-runbook https://www.solvingmicrosoft365.com/guides/entra-sign-in-log-investigation-runbook#2026-09-02 Wed, 02 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to work a suspicious sign-in in the Entra sign-in logs: which log, which columns matter, traveller vs attacker, and when to escalate to compromise. https://www.solvingmicrosoft365.com/guides/entra-id-unused-enterprise-apps-cleanup https://www.solvingmicrosoft365.com/guides/entra-id-unused-enterprise-apps-cleanup#2026-09-02 Wed, 02 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to find unused service principals in Entra ID — sign-in activity, credentials, assignments — remove them without breaking year-end integrations. https://www.solvingmicrosoft365.com/guides/entra-id-over-consented-app-permissions-cleanup https://www.solvingmicrosoft365.com/guides/entra-id-over-consented-app-permissions-cleanup#2026-09-02 Wed, 02 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to find apps holding more Graph permission than they use — delegated and application grants, who consented, what is called — and reduce them safely. https://www.solvingmicrosoft365.com/guides/entra-id-app-registration-secret-rotation https://www.solvingmicrosoft365.com/guides/entra-id-app-registration-secret-rotation#2026-09-02 Wed, 02 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to rotate an Entra app registration secret or certificate with zero outage: find every consumer, add the new credential alongside the old, switch, remove. https://www.solvingmicrosoft365.com/guides/entra-connect-to-cloud-sync-live-migration https://www.solvingmicrosoft365.com/guides/entra-connect-to-cloud-sync-live-migration#2026-09-02 Wed, 02 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Staged runbook for moving a live directory from Entra Connect Sync to Cloud Sync: prerequisite checks, OU-by-OU pilot, cutover, and switching Connect off. https://www.solvingmicrosoft365.com/guides/entra-connect-sync-broken-recovery-runbook https://www.solvingmicrosoft365.com/guides/entra-connect-sync-broken-recovery-runbook#2026-09-02 Wed, 02 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Runbook for when Entra Connect sync stops: scheduler, connectivity, and export errors, the deletion threshold protecting you, and rebuilding on a new server. https://www.solvingmicrosoft365.com/guides/conditional-access-named-locations-rollout https://www.solvingmicrosoft365.com/guides/conditional-access-named-locations-rollout#2026-09-02 Wed, 02 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to add or change a named location in Entra without breaking Conditional Access: MFA and risk side effects, the report-only sequence, the egress-IP trap. https://www.solvingmicrosoft365.com/guides/conditional-access-for-admin-accounts https://www.solvingmicrosoft365.com/guides/conditional-access-for-admin-accounts#2026-09-02 Wed, 02 Sep 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Conditional Access policies for admin accounts: phishing-resistant MFA, managed devices, short sessions, no legacy auth, plus exclusions and rollout order. https://www.solvingmicrosoft365.com/guides/entra-id-governance-explained https://www.solvingmicrosoft365.com/guides/entra-id-governance-explained#2026-08-31 Mon, 31 Aug 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Entra ID Governance explained: access reviews, entitlement management, lifecycle workflows, separation of duties, P2 vs Suite licensing, and rollout order. https://www.solvingmicrosoft365.com/guides/entra-id-app-consent-policies https://www.solvingmicrosoft365.com/guides/entra-id-app-consent-policies#2026-08-31 Mon, 31 Aug 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to stop consent phishing without blocking legitimate apps: Entra ID app consent policies, the admin consent workflow, and a review process that scales. https://www.solvingmicrosoft365.com/guides/entra-connect-vs-cloud-sync https://www.solvingmicrosoft365.com/guides/entra-connect-vs-cloud-sync#2026-08-31 Mon, 31 Aug 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) The two ways to sync on-prem Active Directory to Entra ID — what each does, the scenarios that still force the old tool, and which to use today. https://www.solvingmicrosoft365.com/guides/token-protection-and-token-theft https://www.solvingmicrosoft365.com/guides/token-protection-and-token-theft#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Token theft has become a leading attack pattern. Here's how it works and what Microsoft 365 offers to defend against it. https://www.solvingmicrosoft365.com/guides/scim-provisioning-to-entra-id https://www.solvingmicrosoft365.com/guides/scim-provisioning-to-entra-id#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How SCIM auto-provisions users from HR and identity systems into Entra ID and downstream SaaS apps. https://www.solvingmicrosoft365.com/guides/saml-sso-with-entra-id https://www.solvingmicrosoft365.com/guides/saml-sso-with-entra-id#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to set up SAML single sign-on between a third-party app and Microsoft Entra ID. https://www.solvingmicrosoft365.com/guides/pim-operational-playbook https://www.solvingmicrosoft365.com/guides/pim-operational-playbook#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to run Privileged Identity Management as a working process — onboarding, activation, approvals, and audit. https://www.solvingmicrosoft365.com/guides/m365-service-principal-best-practices https://www.solvingmicrosoft365.com/guides/m365-service-principal-best-practices#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to design, deploy, and operate service principals safely — credentials, permissions, and lifecycle. https://www.solvingmicrosoft365.com/guides/entra-permissions-management https://www.solvingmicrosoft365.com/guides/entra-permissions-management#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Microsoft's Cloud Infrastructure Entitlement Management (CIEM) product, covering Azure, AWS, and GCP permissions. https://www.solvingmicrosoft365.com/guides/entra-id-workload-identities https://www.solvingmicrosoft365.com/guides/entra-id-workload-identities#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Workload Identities is Entra ID's product for managing non-human identities — apps, services, scripts — and the risks they create. https://www.solvingmicrosoft365.com/guides/entra-id-verified-id https://www.solvingmicrosoft365.com/guides/entra-id-verified-id#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Entra Verified ID is Microsoft's decentralised identity / verifiable credential service. Here's the model and the use cases. https://www.solvingmicrosoft365.com/guides/entra-id-self-service-password-reset https://www.solvingmicrosoft365.com/guides/entra-id-self-service-password-reset#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) SSPR lets users reset their own passwords without calling the help desk. Here's the configuration and rollout. https://www.solvingmicrosoft365.com/guides/entra-id-recommendations https://www.solvingmicrosoft365.com/guides/entra-id-recommendations#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) The Entra ID Recommendations dashboard surfaces tenant-specific improvement actions based on Microsoft's analysis. https://www.solvingmicrosoft365.com/guides/entra-id-passwordless-authentication https://www.solvingmicrosoft365.com/guides/entra-id-passwordless-authentication#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) The realistic options for going passwordless in Microsoft 365 — Authenticator, FIDO2, Windows Hello, and passkeys. https://www.solvingmicrosoft365.com/guides/entra-id-password-protection https://www.solvingmicrosoft365.com/guides/entra-id-password-protection#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How Entra ID's password protection blocks weak and breached passwords — for both cloud and on-prem AD accounts. https://www.solvingmicrosoft365.com/guides/entra-id-multi-tenant-organizations https://www.solvingmicrosoft365.com/guides/entra-id-multi-tenant-organizations#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) MTO is Microsoft's modern model for running multiple Microsoft 365 tenants as one organisation. Here's what it provides. https://www.solvingmicrosoft365.com/guides/entra-id-lifecycle-workflows https://www.solvingmicrosoft365.com/guides/entra-id-lifecycle-workflows#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Lifecycle Workflows automate joiner-mover-leaver tasks based on user attribute triggers. https://www.solvingmicrosoft365.com/guides/entra-id-groups-and-group-based-licensing https://www.solvingmicrosoft365.com/guides/entra-id-groups-and-group-based-licensing#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Group types in Entra ID, dynamic groups, and using groups to assign licences automatically. https://www.solvingmicrosoft365.com/guides/entra-id-custom-roles https://www.solvingmicrosoft365.com/guides/entra-id-custom-roles#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How to design and assign custom administrative roles in Microsoft Entra ID for fine-grained least-privilege access. https://www.solvingmicrosoft365.com/guides/entra-id-b2b-guest-access https://www.solvingmicrosoft365.com/guides/entra-id-b2b-guest-access#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) How Entra ID B2B brings external users into your tenant as guests — invitations, controls, and lifecycle. https://www.solvingmicrosoft365.com/guides/entra-id-authentication-contexts https://www.solvingmicrosoft365.com/guides/entra-id-authentication-contexts#2026-05-01 Fri, 01 May 2026 08:00:00 GMT Emil Björk Microsoft Entra (Identity) Authentication contexts let Conditional Access trigger step-up authentication for specific actions, not just specific apps.