Series

MFA & Conditional Access

Conditional access is the bread-and-butter technology that allows us to keep the bad guys out of our M365 tenants, but more often than not we find significant gaps in the way that the policies have been configured that could allow them to slip through the net. In this series we will explore how to properly configure Conditional Access, touch on the complementary technologies that empower it like InTune, and review the types of MFA you should be using in your M365 tenants.

When MFA Isn't Enough: AiTM Phishing & the Microsoft 365 Cookie Theft Problem
Audience: IT Pros & End Users Platform: Microsoft 365 Threat Class: Adversary-in-the-Middle (AiTM) Phishing Series: MFA & Conditional Access Part: 1 of 7 Telling your users to enable Multi-Factor Au
Mar 9, 202617 min read50
Zero to Conditional Access: Your First Five Policies and Why Order Matters
Audience: IT Pros Platform: Microsoft 365 Series: MFA & Conditional Access Part: 2 of 7 In Part 1 of this series, we looked at how AiTM phishing defeats MFA by stealing session cookies — and I menti
Mar 23, 202617 min read5

Command Palette