Another security blog...

Stop Flying Blind, Take Two: A Brand New Entra ID App Report

A year after the first release, the Entra ID App Report gets a major upgrade: better risk scoring, sharper filtering, and full visibility.

Jul 18 • Matej Klemenčič

2

NameCodex.app: Because Every Tenant Deserves Better Names

Every tenant deserves better names. Free naming convention generator for Microsoft 365 & Entra ID admins.

Jul 7 • Matej Klemenčič

1

March 2026

When OAuth Redirects Become a Phishing Tool

Attackers can abuse OAuth redirect behavior to deliver phishing and malware.

Mar 15 • Matej's Copilot

2

March 2026 is here! Synced Passkeys and Passkey Profiles rollout?

Microsoft is bringing Passkey Profiles and Synced Passkeys to General Availability in March 2026.

Mar 1 • Matej's Copilot

2

August 2025

Entra ID Guest Accounts: Identify, Analyze, and Clean Up (August 2025 Update)

For a while, I had been manually running cmdlets to export guest account reports from Entra ID.

Aug 15, 2025 • Matej Klemenčič

3

Stop Flying Blind: Get Visibility into Your Entra ID Enterprise Applications

The topic of Enterprise Applications in Entra ID is something that, not long ago, made me feel uncertain.

Aug 3, 2025 • Matej Klemenčič

3

May 2025

Assume Breach: Securing MFA Registration in Entra ID

Thanks for reading Another security blog...!

May 15, 2025 • Matej Klemenčič

1

February 2025

Protecting on-premises from Microsoft 365 attacks

A few years ago, I came across a blog post titled Protecting Microsoft 365 from on-premises attacks, which resonated deeply with me.

Feb 18, 2025 • Matej Klemenčič

2

July 2024

Tenant Restrictions Made Easy with Global Secure Access

In certain scenarios, organizations may want to restrict access to other tenants to prevent potential data leakage or for other security reasons.

Jul 21, 2024 • Matej Klemenčič

April 2024

Switching Off Self-Service Password Reset for Administrators in Microsoft Entra

Recently, I assisted a client in implementing the Microsoft Entra self-service password reset (SSPR) feature. Their requirement was that this service be…

Apr 22, 2024 • Matej Klemenčič

February 2024

Plus Addressing in Exchange Online: Solution for Admin Accounts Without a Mailbox?

One of the cornerstone principles in maintaining a secure Microsoft 365 environment is the segregation of administrative and everyday user accounts…

Feb 11, 2024 • Matej Klemenčič

1

October 2023

Password-less: use FIDO2 as smart card

In today's digital age, where security and privacy are extremely important, we are facing the task of making sure that our devices and services have…

Oct 24, 2023 • Matej Klemenčič