Post

Last two weeks I talked about BYO Identity Providers in Entra ID and backdoors to External Auth Methods to bypass MFA. Only possible because MSFT doesn't implement the mandatory OIDC security measures. Slides with optional dark mode on: dirkjanm.io/talks/

dirkjanm.ioPresentations and external blogsDirk-jan’s personal blog, mostly containing research on topics I find interesting, such as (Azure) Active Directory internals, protocols and vulnerabilities.

Dirk-jan

@dirkjanm.io

Thanks for everyone who attended the talk at either x33fcon or OffensiveX. Both were amazing conferences and it was super fun to meet old and new people!

24/6/25, 7:12 am0 reposts2 likes

Katie Knowles

@siigil.bsky.social

24 June 2025

Excited to watch these! roadoidc was great to play with, thank you for adding it. Been eagerly waiting to hear the full story on this, EAM, and FICs. 😁