Elektrine
Log in Register

#entraid

6 posts · Last used 25d

Back to Timeline
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 20, 2026
Proofpoint details OAuth client ID spoofing, a stealthy account enumeration technique that probes Microsoft Entra ID without a successful sign-in event. #OAuthSpoofing #EntraID #AccountEnumeration #CloudSecurity #Proofpoint http://securityonline.info/oauth-client-id-spoofing/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
TonyRedmond
Tony Redmond @TonyRedmond@techhub.social · Jul 14, 2026
Microsoft to Stop Providing Telephony-Based Authentication Methods for MFA in February 2027 In an important announcement for all tenants, Microsoft revealed that Entra ID will no longer provide SMS one-time codes or voice calls for MFA challenges after February 1, 2027. Tenants can continue to use telephony-based authentication methods after that date, but only by purchasing a service from a telecom provider. This is arguably the biggest change in Entra ID authentication since mandatory MFA for administrative interfaces – and we have a PowerShell script to help identify the affected accounts. https://office365itpros.com/2026/07/14/entra-sms-one-time-code/ #EntraID
1
0
0
Frank Carius @msxfaq@infosec.exchange · Jul 06, 2026
#MSXFAQ Simple SAML Sample https://www.msxfaq.de/cloud/authentifizierung/simple_saml_sample.htm - wollten Sie schon immer mal wissen, wie Sie ihre Webseite mit #EntraID #SAML-Tokens absichern können? Eine minimale BeispielApp fordert Token an und zeigt sie an. Was Sie danach weiter draus machen, ist ihre Phantasie.
0
0
0
deepthoughts10
Brian Clark @deepthoughts10@infosec.exchange · Jul 02, 2026
RE: https://infosec.exchange/@CDubbs/116847680945065797 Create a group called "Device Code Users" and a CA policy that blocks the use of the Device Code authentication flow except for those in the group. #cybersecurity #entraID
Quoting
SIEM Shady @CDubbs@infosec.exchange
EntraID PSA: Disable OAuth Device Code flow in your default conditional access policy. You can search sign-on logs for people using this method to baseline and manage exceptions where appropriate.
Open quoted post
0
0
0
iX_Magazin
iX Magazin @iX_Magazin@social.heise.de · Jun 11, 2026
heise+ | POSIX-Attribute für Entra ID mit Himmelblau anlegen Werden vor einer Entra ID-Umstellung Linux-Clients und -Fileserver genutzt, gelten dort POSIX-Berechtigungen. Ein eigenes ID-Mapping kann sinnvoll sein. https://www.heise.de/ratgeber/POSIX-Attribute-fuer-Entra-ID-mit-Himmelblau-anlegen-11316718.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon #EntraID #IT #Linux #Unix #news
1
0
12

You've seen all posts