conditional-access

Lessons from the field. Always landing on my feet.

All Cloud Security Identity Security Microsoft Sentinel Microsoft Defender AI Security Detection Engineering Threat Detection Container Security Entra ID Zero Trust DevSecOps Infrastructure as Code Agentic AI 4 posts
Jerrad Dahlager
Jerrad Dahlager, CISSP, CCSP Cloud Security Architect · Adjunct Instructor
About me →
Microsoft Security

Microsoft Security Fall 2026: Five Changes to Prepare For

Review update (September 25, 2026): The integration identity used for incident comments can require tenant-wide incident-write permission, not a comment-only grant. Keep a dedicated identity, narrowly selected integrations and documented credential …

16 min read Read more →
Threat Detection

Block Device Code Phishing in Entra Without Breaking Legit Workflows

Review update (September 26, 2026): The merged rules run every 15 minutes, retain their correlation lookbacks, and gate on recent ingestion from either relevant side. Rule 2 merges duplicate representations of a successful sign-in while retaining …

18 min read Read more →
Threat Detection

Detecting OAuth Redirect Abuse with Microsoft Sentinel and Entra ID

Review update (September 26, 2026): The merged source preserves an already-disabled user-consent policy and refuses unrecognized custom self-consent policy replacement for manual review. Reports, manifest staging and request-body files are …

18 min read Read more →
Identity Security

March–June 2026 Entra ID Changes: Passkey Profiles and Conditional Access Enforcement

Review update (September 25, 2026): Resource links to older third-party rollout summaries are historical background. Use current Microsoft guidance and the actual tenant Message Center notice for dates/cloud scope. The Baseline scopes settings link …

14 min read Read more →