Sebastian Flæng Markdanner [MVP]

Managing custom extensions in Microsoft Entra can be a pain. So I built Entra Extensions Manager: an open-source portal to discover, investigate & manage Schema, Directory and Open extensions Includes a no-login Demo mode! www.chanceofsecurity.com/post/introdu... #MicrosoftEntra #EntraID #OpenSource

While the extensionAttribute1–15 in #Entra is easy to use. They're not always the right choice. I wrote a practical breakdown of Entra Extension Attributes, Directory Extensions, Schema Extensions, and Open Extensions. www.chanceofsecurity.com/post/choosin... #Identity #MSEntra #MVPBuzz

Just released the new PIMActivation Portal! A PWA built for faster Entra PIM activations across desktop & mobile with -Bulk activations -Cross-tenant support -Self-hosted option -No backend/token cache www.chanceofsecurity.com/post/introdu... #Microsoft #Azure #EntraID #PIM #CyberSecurity #MVPBuzz

Microsoft have quietly introduced Time-Based Conditional Access through the beta API I've tested it, explored limitations, and covered real-world use cases like shift-based access, and restricting critical apps by working hours www.chanceofsecurity.com/post/time-ba... #Microsoft #MVPBuzz #MSEntra

Most break-glass accounts won’t work when they’re needed without testing, no monitoring or wrong design. I wrote a practical guide on designing, securing and monitoring emergency access in Microsoft Entra 👇 www.chanceofsecurity.com/post/break-g... #CyberSecurity #MicrosoftEntra #ZeroTrust #MVPBuzz

Built Access Package Documentor as part of the community-driven M365IdentityPosture PowerShell module Visualizing Entitlement Management - incl. Catalogs -> resources Built with Christian Frohn after great discussions in EMS Discord run by Jonas Bøgvad. github.com/Noble-Effeci... #M365 #MSEntra

Inbound SMTP still vulnerable to downgrade & MITM attacks? Then read this post for configuring inbound DANE + DNSSEC to enforcing TLS encryption Covers prereqs, DNS config, validation & testing. www.chanceofsecurity.com/post/how-to-... #ExchangeOnline #DNSSEC #DANE #EmailSecurity #Microsoft365

Email security isn’t magic, it’s layered building blocks. This post breaks down these blocks, and shows how they work together to protect sender identity, DNS integrity, and SMTP transport. 🔗 chanceofsecurity.com/post/modern-... #EmailSecurity #DMARC #DNSSEC #ExchangeOnline #MicrosoftSecurity #MS

🚀 PIMActivation v2.0.0 is out! Azure RBAC PIM activation is finally here, with faster role enumeration, bulk select, and support for custom Entra ID app registrations. If you work with PIM daily, this update is worth it. Check it out: github.com/Noble-Effeci... #Azure #EntraID #PIM #PowerShell

Running Azure App Service behind Front Door + Private Link? Authentication probably “works on paper” but still breaks. I documented the missing steps Microsoft forgot. Forward proxy config included. Full guide: www.chanceofsecurity.com/post/hidden-... #Azure #AzureFrontDoor #CloudSecurity #MSEntra

This is crazy… Security Copilot coming to Microsoft 365 E5! learn.microsoft.com/en-us/copilo... Looking forward to what else comes out of this years #Microsoft #Ignite

Fast-Start Checklist for Microsoft Defender CSPM: From Enablement to Best Practices techcommunity.micros... #MicrosoftDefender #DefenderforCloud #Security #MicrosoftSecurity #Cybersecurity #DefenderXDR #MicrosoftThreatIntelligence

The final part in my Entra Authentication Contexts series is out! Learn how to monitor & report with KQL and a new PowerShell module, M365IdentityPosture. Gain visibility, track usage and strengthen governance. 👉 www.chanceofsecurity.com/post/masteri... #MSEntra #PowerShell #KQL #M365Security

Securing data isn’t just about access, it’s about context. In Part 3 of my Authentication Contexts series, I dive into real-world data protection with MDCA, SharePoint, and Sensitivity Labels. Read the post: www.chanceofsecurity.com/post/masteri... #MSEntra #DataProtection #ZeroTrust

Part 2 of my series on Microsoft Entra Authentication Context is live! 🚀Diving into real-world access & action scenarios with Practical configs, best practices & CA policy examples included. www.chanceofsecurity.com/post/masteri... #MicrosoftEntra #ConditionalAccess #CloudSecurity #MSEntra

Currently attending an identity management session by @mortenknudsen.net @ #IdentitySummit - so far we’ve gone over common “problems” that Morten often encounters, and so far i’ve simply been notting agreeingly for everything! It’s kind of scary that the same issues keeps popping up!

Conditional Access: great for wide nets 🎣 …less so for scalpel work. Enter Authentication Contexts — Entra’s hidden gem for precision access control, across Entra, Defender & Purview. Dive into Part 1 of my guide: 👉 www.chanceofsecurity.com/post/masteri... #MicrosoftEntra #CyberSecurity #MSEntra

🚀 New PowerShell tool just dropped: PIMActivation Activate Microsoft Entra PIM roles (single or bulk) with a GUI and support for all requirements including Auth Contexts! 👉 www.chanceofsecurity.com/post/microso... #PowerShell #Entra #PIM #ITAdminTools #MSEntra #MSIntune

RMAUs in Microsoft Entra let you delegate access without over-permissioning—even Global Admins are blocked unless scoped. Learn how to set them up, use them with PIM, and apply them to real-world scenarios, in my newest post! 🔗 bit.ly/4mVvypu #MicrosoftEntra #ZeroTrust #IdentitySecurity #EntraID

Part 05 of my Securing Microsoft Business Premium series is here! This post covers external identity management: guest vs member users, cross-tenant access, user flows & more. 🔗 www.chanceofsecurity.com/post/securin... #Microsoft365 #IAM #EntraID #MSIntune #MSEntra #CloudSecurity

New blog drop: Master guest onboarding with Microsoft Entra User Flows—automate access, leverage IdPs, and boost your security game. Simplify collaboration without losing control! Check it out here → www.chanceofsecurity.com/post/go-with... #MicrosoftEntra #Azure #IAM #CloudSecurity #Microsoft

🚨 New blog post! Dive into Microsoft Password Protection—from SSPR setup to banned passwords and hybrid deployment. Learn how to lock down your identity perimeter. Read the post here: www.chanceofsecurity.com/post/securin... #PasswordSecurity #CyberSecurity #HybridIdentity #SSPR #MSIntune #MSEntra

Securing Microsoft Business Premium involves more than authentication. 🔑 Learn how Zero Trust & Conditional Access policies can protect your organization from risks. www.chanceofsecurity.com/post/securin... #MicrosoftSecurity #ZeroTrust #Authorization #ConditionalAccess #MSEntra #MSIntune

Countdown to #ELDK2025 with a cup of coffee in hand. Looking forward to a great conference!

🚀 New post: God Mode with a Timer – Restricting Elevated Access in Entra with Logic Apps 🔐 Automate access removal & enforce Zero Trust with Logic Apps + Automation Account! Read more 👉 chanceofsecurity.com/post/restric... #MicrosoftEntra #AzureSecurity #IAM #ZeroTrust #CloudSecurity

New — Edward "Big Balls" Coristine of DOGE now has digital access to the Cybersecurity and Infrastructure Security Agency (CISA), an agency source has confirmed to me.

🚀 New Blog Post! Unlock Microsoft Entra’s Elevated Access Logs for better security & insights! 🔐 Learn how to monitor & manage this powerful tool to prevent security risks! 🔗 Read more: www.chanceofsecurity.com/post/microso... #MicrosoftEntra #AzureSecurity #CloudSecurity #IAM #MSEntra #MSIntune

🚨 Phishing, AiTM, and weak passwords are putting your org at risk. In Part 2 of my Microsoft Business Premium security series, I break down how to fix it before it’s too late. 🔐 🔗 www.chanceofsecurity.com/post/securin... #CyberSecurity #Microsoft #Authentication #ZeroTrust

Anyone else got issues with registering #Passkey in #Microsoft Authenticator on unmanaged iOS & Android devices if you enforce Compliance in #ConditionalAccess? #MSEntra

Your Microsoft Entra Tenant Isn’t as Secure as You Think – Fix It with Protected Actions! Protect your most critical configurations with #MSEntra Protected Actions. 🔗 Read more: chanceofsecurity.com/post/microso... #CyberSecurity #IAM #ZeroTrust #MSIntune #MSEntra

🚀 Just launched the first part of my new series: Securing Microsoft Business Premium! Learn foundational tips to secure your SMB with step-by-step guidance on Entra, Defender, and more. Start your security journey today! www.chanceofsecurity.com/post/securin... #Microsoft #MSEntra #Cybersecurity

Unlock the power of Plus Addressing in #Microsoft! 📧 Manage emails sent to unlicensed admin accounts and enable easier management when receiving mails from multiple sources! Check out my latest guide on this feature: www.chanceofsecurity.com/post/masteri... #EmailManagement #TechTips #Productivity

Whoever at #Microsoft had a hand in naming this application preference for Office applications is a genius and deserve a raise! #MSFT #MSIntune

Unlock the power of automated role assignment reporting in #Azure! Dive into my latest guide on mastering #RBAC and #EntraID roles. Enhance your security and streamline access management. Read more: www.chanceofsecurity.com/post/masteri... #CloudSecurity #Automation #MSIntune #EntraID #Azure

Goingninto 2025 I updated my Conditional Access Series on my blog adding visual aid for each recommended policy and streamlining the posts. Read part 1/5 here: www.chanceofsecurity.com/post/microso... #Microsoft #Cybersecurity #ConditionalAccess #MicrosoftEntra #Identity #IT #ITadmin

A week ago today, the awesome Aaron Dinnage released the much anticipated update to the Microsoft licensing overview m365maps! Many hats of for keeping us somewhat sane when trying to make sense of licensing m365maps.com #Microsoft #MSIntune #Licensing #MCTbuzz #MSEntra

Merry Christmas everyone! #MCTBuzz #Microsoft #Christmas

Check this out Managed identities for federated identity credentials for apps in #MicrosoftEntra devblogs.microsoft.com/identity/acc... Allowing for access to resources such as MS Graph & Azure resources, while allowing features like Workload CAs like I've written about previously #MSIntune #MSFT

If you’re using @microsoft.com MDT for deployment, you should give @niehaus.bsky.social post a read. Short summary: MDT will not be supported after October 10th, 2025! oofhours.com/2024/12/17/m... #Microsoft #MSIntune

Finally - makes it so much easier to keep track of all the goodies! Thanks for sharing @rodtrent.bsky.social 👌🏼

OH MY GOD!! WE HAVE THE COMBINED WEBB AND CHANDRA VIEW OF NGC 602!! IT’S SO BEAUTIFUL 🤩🌌

Another awesome post from @per-torben.bsky.social about one of my favorite topics, Conditional Access! Go check it out, especially the monitoring part was an ah-ha experience for me 👌🏼

Wrapping up the year and my Entra Identity Governance series with Lifecycle Workflows! 🚀 Automate onboarding, role changes, and offboarding to save time, reduce errors, and support Zero Trust. Read the final post: 🔗 www.chanceofsecurity.com/post/microso... #MicrosoftEntra #Automation #ZeroTrust

This site needs an “eidt post” option!

M365Maps.com have been such a grest resource for not just me but the community as a whole sadly it hasn’t received updates in over a year 😔 So what now? Check out this new up-to-date alt. created by Matthew Wolf: m365insights.com Making navigating #Microsoft Licenses that much easier! #MSIntune

Go check it out! Super awesome work by the #Maester team!

As you might have heard: #Microsoft will be enforcing switch to New #Outlook for SMB 01/01-25 and Enterprises 01/04-26! To opt-out you can create an office policy via #MSintune or config.office.com to disable the switch: Policy Name: Admin-Controlled Migration to New Outlook Value: Disabled

About time! Looks awesome 👌🏼