https://clefsoft.co.uk/categories/entra-id/Recent content in Entra ID on Paul Clephan | Intune, ConfigMgr, SCCM & Windows Management BlogHugoen-gbSun, 30 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability-for-incoming-trust-re/Sun, 30 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability-for-incoming-trust-re/Microsoft Entra Kerberos key rotation now handles incoming trust referral flows more reliably, improving hybrid authentication stability for admins.https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability-for-incoming-trust-re/Sat, 22 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability-for-incoming-trust-re/Microsoft Entra improves Kerberos key rotation reliability for incoming trust referral flows, reducing authentication disruptions in hybrid environments.https://clefsoft.co.uk/news/bring-your-own-device-byod-support-for-windows-client-using-entra-registration/Tue, 04 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/bring-your-own-device-byod-support-for-windows-client-using-entra-registration/Windows BYOD via Microsoft Entra registration lets users reach corporate resources from personal PCs without domain join. What IT admins should review.https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability/Tue, 04 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/microsoft-entra-kerberos-key-rotation-improved-reliability/Microsoft Entra now validates Kerberos tickets against both primary and secondary keys, reducing authentication failures during key rotation.https://clefsoft.co.uk/news/entra-authenticator-jailbreak-detection/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/entra-authenticator-jailbreak-detection/Microsoft Authenticator now refuses to add or use work accounts on jailbroken or rooted devices — secure by default, no admin toggle, and no Intune enrolment required to get it.https://clefsoft.co.uk/news/entra-byod-windows-registration/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/entra-byod-windows-registration/Users can now reach internal apps from their own Windows machines via Entra registration and the Private Application traffic profile — no domain join, no full management, just registered-device trust.https://clefsoft.co.uk/news/entra-conditional-access-for-agents/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/entra-conditional-access-for-agents/AI agents that hold their own user accounts are now first-class Conditional Access targets — you can scope policy to them, apply agent risk, and require compliant devices for the ones running on managed endpoints.https://clefsoft.co.uk/news/entra-domainless-saml-federation/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/entra-domainless-saml-federation/External SAML federation no longer needs the user’s email domain to match a preconfigured IdP domain — which quietly kills a whole category of ‘why can’t this partner sign in’ tickets.https://clefsoft.co.uk/news/entra-kerberos-key-rotation-reliability/Sun, 02 Aug 2026 00:00:00 +0000https://clefsoft.co.uk/news/entra-kerberos-key-rotation-reliability/Kerberos key rotation could break authentication when referral tickets were signed with a secondary key. Entra now validates against both keys during rollover — the kind of fix you only appreciate after it’s bitten you.