Zero Trust
Lessons from the field. Always landing on my feet.
Entra SSPR and Passkey Readiness for Microsoft-Provided SMS/Voice Delivery Retirement
Microsoft is advancing three related parts of the Entra authentication and recovery experience through July 2027: On September 1, 2026, Microsoft began gradually moving users enabled for SMS or voice into the Microsoft-managed passkey Registration …
Block Prompt Injection at the Network Layer with Microsoft Entra Prompt Injection Protection
Review update (September 25, 2026): Generative AI Insights remains preview and can retain full prompts with user identity. Set access, retention and user-notice policy before enabling it. Portal screenshots below are retained from the March 2026 …
March–June 2026 Entra ID Changes: Passkey Profiles and Conditional Access Enforcement
Review update (September 25, 2026): Resource links to older third-party rollout summaries are historical background. Use current Microsoft guidance and the actual tenant Message Center notice for dates/cloud scope. The Baseline scopes settings link …
Just-In-Time Access for AI Agents: Building a ZSP Gateway in Azure
Review update (September 25, 2026): The merged September 25 source rejects ambiguous/dot-segment scopes and mismatched ARM response identities, uses explicit managed identity with closed SDK clients, and moves synchronous operations off the async …