Independent Microsoft identity guides
Guides, ideas, and troubleshooting for the people behind every successful sign-in.
Editorial illustrationWhat external IdP passkeys mean for Microsoft 365—and the brokers, browsers, and rollout details to check before you enable them.
Read the guideExplore the blog
131 published · search by title, error code, or topic
131 matching articles
Deploy Microsoft Entra account recovery with Verified ID, Face Check, claim validation, staged testing, monitoring, troubleshooting, and safe rollback.
Migrate Microsoft Entra SAP SuccessFactors provisioning from basic authentication to workload identity with staged testing, rollback, logs, and deadline checks.
Fix Windows Hello registration blocked by Conditional Access: trace the policy, break bootstrap loops, validate TAP, and restore provisioning safely.
Govern Azure RBAC access with Microsoft Entra access packages: scope roles safely, choose active or eligible access, pilot approvals, and verify removal.
Fix AADSTS50076 MFA required errors by tracing Conditional Access, per-user MFA, session changes, app interaction, registered methods, and sign-in evidence.
Manage Microsoft Entra recommendations with Graph beta: inventory resources, add workflow tags, choose accurate states, and preserve review evidence.
Technical diagram · open article to exploreEnable external IdP passkeys for Microsoft 365 apps safely: verify federation, brokers, browsers, platform scope, rollback, and sign-in evidence.
Migrate Microsoft 365 cross-tenant calendar sharing safely. Inventory OrgRel, map scopes, coordinate testing, preserve rollback, and verify both tenants.
Prevent nested groups in Microsoft Entra with the new disableNesting preview control. Inventory dependencies, pilot safely, monitor changes, and roll back.
Disable a Microsoft Entra Agent ID blueprint safely, contain its agent identities, preserve evidence, account for live tokens, and restore access cleanly.
Use Microsoft Graph group extension attributes to read synced AD values, verify source and sync state, inventory usage, and avoid custom-data collisions.
Deploy Microsoft Entra Connect 2.6.92.0 safely: scope the PTA registration fix, upgrade the right server, validate sync and sign-in, and preserve rollback.
Build your understanding
Domains, directory objects, and the pieces that make Windows identity work.
02 / The decisionFollow the evaluation of a sign-in, from policy scope to the final access decision.
03 / The next stepRegistration, authentication, and the policy choices behind a passwordless rollout.
Stay in the loop
Get an email when a new article is published. You can also follow the RSS feed.
