Social Identity Provider Support for Native Authentication is Generally Available
If you build customer-facing apps, you know the tension: users expect to sign in with the accounts they already have, but you don’t want to hand the whole ...
Recent Posts
Federate External Tenants Using OIDC in Microsoft Entra External ID
Connecting workforce identity to customer-facing applications has long meant duplicate accounts — and duplicate accounts mean extra lifecycle work, inconsi...
Cloud Firewall with Remote Networks Goes GA in Global Secure Access
Even in a cloud-first architecture, branch traffic still needs old-school network control. The problem is that maintaining that control usually means rule ...
Secure Branch Office Internet Access with GSA Remote Networks is Generally Available
A lot of branch and remote-site traffic still comes from devices that will never run a client — printers, kiosks, IoT gear, shared workstations, and the li...
Explicit Forward Proxy for Microsoft Entra Internet Access
Plenty of internet traffic still originates from places where installing the Global Secure Access client just isn’t realistic — multi-session VDI, kiosks, ...
Configurable Token Lifetimes Arrive in Microsoft Entra ID
Token lifetime settings look minor on paper, but they shape how long access persists after it’s granted — and not every application deserves the same behav...
Prefetch Workday Termination Data is Generally Available
Offboarding delays are more than an HR annoyance — they’re an identity risk. Every hour an account stays active past someone’s last day is an hour of unnec...
Network Content Filtering by File Type in Global Secure Access is Generally Available
A lot of modern data loss looks completely ordinary. Someone uploads a spreadsheet to a generative AI tool, drags a PDF into personal mail, or pushes a con...
Certificate-Based Authentication Comes to iOS
Most organizations get phishing-resistant authentication working on the desktop and then stall at mobile. iPhones and iPads are where people actually do a ...
App-Specific Sign-In Experiences with Branding Themes in Microsoft Entra
For years, Microsoft Entra branding has been a tenant-wide decision. That’s fine when one identity maps to one audience — but most tenants don’t work that ...
Microsoft Identity Manager 2016 Service Pack 3 is Generally Available
For hybrid identity teams, stability work matters just as much as new features. Microsoft Identity Manager 2016 Service Pack 3 is now Generally Available, ...
Certificate Authority Scoping for CBA Lands in Microsoft Entra
In PKI-heavy environments, broad certificate trust gets messy fast. If every trusted certificate authority is valid for every user, you lose the ability to...