conditional-access

Lessons from the field. Always landing on my feet.

All Cloud Security Identity Security Microsoft Sentinel AI Security Detection Engineering Microsoft Defender Threat Detection Entra ID Container Security Zero Trust DevSecOps Infrastructure as Code Agentic AI 3 posts
Jerrad Dahlager
Jerrad Dahlager, CISSP, CCSP Cloud Security Architect · Adjunct Instructor
About me →
Threat Detection

Block Device Code Phishing in Entra Without Breaking Legit Workflows

Device code phishing is nasty because the user does not hand over a password. They hand over a session. The lure sends the victim to a legitimate Microsoft device sign-in page. The victim enters a short code. Entra ID issues tokens to the attacker’s …

16 min read Read more →
Threat Detection

Detecting OAuth Redirect Abuse with Microsoft Sentinel and Entra ID

On March 2, 2026, Microsoft published an advisory on OAuth redirection abuse enabling phishing and malware delivery. Microsoft described phishing-led campaigns where attackers register OAuth apps with attacker-controlled redirect URIs, then send …

16 min read Read more →
Identity Security

March–June 2026 Entra ID Changes: Passkey Profiles and Conditional Access Enforcement

Microsoft made passkey profiles and synced passkeys generally available in March 2026, then adjusted a separate Conditional Access enforcement rollout to begin June 15, 2026. Both changes entered tenants through Microsoft-managed schedules, although …

13 min read Read more →