Overview Microsoft is retiring the legacy MFA and SSPR policies by 30th September 2025 as part of its modernisation path. Migrating to the new Authentication Methods policy offers more precision, central control, and futureproof cloud environment. The new Microsoft Entra ID authentication method policy offers a unified, modern way to manage your organisation’s authentication methods, […]
Introduction Break glass accounts are your emergency lifeline, providing privileged access when the identity system fails and no one can sign in to access organisation resources due to outages, breaches, lockouts, or misconfiguration. These accounts are critical for maintaining control and continuity but must be tightly secured, rarely used, and continuously monitored. ⚠️ Why They […]
Security Best Practices Using Only the Org Settings Portal Microsoft 365 provides robust tools for businesses of all sizes, but with this power comes responsibility. Securing your tenant doesn’t always require premium licenses or access to multiple admin portals. You can significantly improve your organisation’s security posture using only the Microsoft 365 Admin Centre’s “Org […]
This blog post is based on the presentation given by Dave Cook in our Jisc Cyber Community in April 2024. Who is this blog aimed at: IT Teams who administer and are responsible for Cloud estates and the security of them. What is the purpose of the blog: To help member/customer IT teams understand the […]
Automate automate automate, that should be part of my job title. In this post I’m going to talk about a lesser known feature of Azure AD, which is now available to anyone with A3/E3 or above, group based licensing. With Microsoft’s retirement of the AzureAD and MSOL modules (replaced with MSGraph) you will need to […]