Device Association in Windows 11: Binding Devices to Your Tenant Before Enrollment
A practical look at Device Association in Windows 11 - what it does, why it matters, how to enable it, and best practices for IT admins.
Entra-Id
7 articles tagged with Entra-Id
Authenticator Now Blocks Jailbroken and Rooted Devices
Microsoft Authenticator now refuses to add or use work accounts on jailbroken or rooted devices — secure by default, no admin toggle, and no Intune enrolment …
BYOD Windows Access with Entra-Registered Devices
Users can now reach internal apps from their own Windows machines via Entra registration and the Private Application traffic profile — no domain join, no full …
Conditional Access for Agent Identities
AI agents that hold their own user accounts are now first-class Conditional Access targets — you can scope policy to them, apply agent risk, and require …
Domainless SAML Federation in Entra External ID
External SAML federation no longer needs the user’s email domain to match a preconfigured IdP domain — which quietly kills a whole category of ‘why …
Entra Kerberos Key Rotation: The Reliability Fix Worth Knowing
Kerberos key rotation could break authentication when referral tickets were signed with a secondary key. Entra now validates against both keys during rollover — …
Wiring Up GitHub Actions OIDC to Azure: Two Bugs No Guide Mentions
Federated credentials to Azure are supposed to be the easy, secure way to do CI/CD. They are — right up until the subject claim doesn’t match any …