AI Agents Need Their Own Identity: A Zero Trust Playbook
Stop wiring AI agents to shared secrets and borrowed service accounts. Treat every agent as a governed non-human identity with the controls you already run.
Recent Posts
User attribute updates in Lifecycle Workflows
Lifecycle Workflows can now test an Update user attributes task for joiner, mover, and leaver automation.
Sensitivity Labels for Security Groups: Purview Classification Meets Entra Access
Microsoft Entra now lets you apply Purview sensitivity labels to cloud security groups in public preview — here’s why it matters and how to test it.
SAP SuccessFactors Provisioning Without Stored Passwords: Workload Identity Auth Hits Preview
SAP SuccessFactors HR provisioning can now use short-lived federated OIDC tokens instead of stored basic-auth passwords. Here’s how the Public Preview works.
Redesigned My Account Pages: Easier Self-Service in Microsoft Entra
Modernized My Account pages are generally available, giving users clearer self-service paths for account and device tasks.
Phish-Resistant MFA for Linux Desktops
Microsoft single sign-on for Linux is generally available, bringing Entra registration, brokered SSO, and device-based controls to Linux desktops.
Passkeys on Windows Hello: Familiar user experience, phishing-resistant sign-in
Passkeys on Windows Hello let users register device-bound FIDO2 credentials in the local Windows Hello container.
Passkey adoption with registration campaigns: Turn passwordless intent into registrations
Microsoft Entra registration campaigns can now nudge eligible users to register passkeys during sign-in.
Govern Azure roles with access packages
Access packages can now govern active and eligible Azure RBAC assignments at key Azure scopes in Public Preview.
Domainless SAML federation
Domainless SAML federation lets external users sign in with their own IdP even when email domains do not map cleanly.
Device soft delete in Microsoft Entra ID
Device soft delete moves deleted Entra device objects into a recoverable state instead of removing them immediately.
Cross-Tenant Group Synchronization
Cross-tenant group synchronization is generally available for synchronizing security groups and memberships across Entra tenants.