1d ago · 14 min read · This post explores a specific hybrid identity scenario: taking a group synchronized from Active Directory Domain Services (AD DS), changing its Source of Authority (SOA) to Microsoft Entra, and then u
Join discussion
5d ago · 17 min read · Audience: IT Pros & End Users Platform: Microsoft 365 Threat Class: Adversary-in-the-Middle (AiTM) Phishing Series: MFA & Conditional Access Part: 1 of 7 Telling your users to enable Multi-Factor Au
Join discussion
Feb 10 · 6 min read · Identity in Microsoft Entra ID: Zero Trust, Control Planes, and the Future of Identity Microsoft Entra ID does not treat identity as a simple login mechanism anymore. Identity is now the decision engine, the policy enforcer, and the first line of def...
Join discussion
Feb 3 · 6 min read · Understanding Identity: From Active Directory to Microsoft Entra ID Identity is one of those things in IT that works quietly in the background until the day it doesn’t. The moment the wrong person accesses the wrong resource, Identity and Access Mana...
Join discussion
Feb 2 · 2 min read · The Actual root cause: Installing AADCloudSyncTools & prerequisites After changing the UPNs and restarting services, I was still getting timeouts. In desperation, I turned to Microsoft's documentation and discovered the AADCloudSyncTools PowerShell m...
Join discussion
Feb 2 · 3 min read · Based on my experience, here's the troubleshooting workflow I'd recommend for Cloud Sync issues: Phase 1: Initial Checks Check sync status in Azure Portal: Entra ID → Cloud sync → Configurations Check provisioning logs: Entra ID → Monitoring → Prov...
Join discussion
Feb 2 · 2 min read · The Potential root cause: UPN Domain Mismatch After hours of troubleshooting, I discovered a possible root cause. My on-premises users had UPNs like: Testuser@main.KMTHomelab.com SamuelGreeb@main.KMTHomelab.com But in Azure, my only verified doma...
Join discussion
Feb 1 · 2 min read · The Problem → *.msappproxy.net issue Even after getting users to sync, I noticed errors in the provisioning logs about connectivity to *.msappproxy.net endpoints. The agent was intermittently losing connection to Azure. The *.msappproxy.net issue is ...
Join discussion
Feb 1 · 13 min read · Microsoft Graph change notifications are a great building block, but the “classic” model (hosting a public HTTPS webhook) tends to get uncomfortable fast and won't make you any friends in the Cybersecurity or Networking/Gateway teams to manage the in...
Join discussion
