Identity Archives - Mindcore Techblog

Entra ID – PIM for Groups – Automating PIM Group Activation in Entra ID with PowerShell

Michael Morten Sonne January 12, 2026

Microsoft Entra ID Privileged Identity Management (PIM) for Groups allows organizations to control and audit elevated group memberships through just-in-time access. Managing elevated permissions in Microsoft Entra ID can sometimes be tricky, especially when it comes to Privileged Identity Management (PIM) for Groups. While the Entra portal allows users to

Continue to read »

How Community Feedback Shaped the New Entra ID App Management UI

Michael Morten Sonne November 17, 2025

Back in September Microsoft has recently teaset App Management Policies in Microsoft Entra ID UI, which let you set tenant-wide restrictions on how applications and service principals can be configured from the UI – for example restricting certificate lifetimes, blocking new passwords/secrets, enforcing valid URI formats, etc. (as it looks like for now

Continue to read »

Azure Arc & Hybrid Workers – Simplifying Hybrid Cloud Automation Pr.1

Michael Morten Sonne July 28, 2025

What is Azure Arc Azure Arc is a Microsoft service that extends your Azure management and governance capabilities to your resources outside of Azure, and this can include on-premises servers, virtual machines, and other cloud environments. With Azure Arc, you can centrally manage, secure, and automate workloads across hybrid and

Continue to read »

Entra ID – Managed Identity Permission Manager

Michael Morten Sonne April 8, 2025

Managing permissions for Managed Identities in Azure/Entra ID has been a long-standing challenge. Microsoft has yet not provided a built-in interface for this, leaving administrators reliant on PowerShell to handle permissions – even if the “same” exists for App Registrations and Enterprise Applications. To bridge this gap, I developed this

Continue to read »

Mandatory MFA enforcements is coming

mms@mindcore.dk October 3, 2024

Introduction In case you missed the update about the new announcement Microsoft is tightening security around Azure and Microsoft admin portals, by enforcing multifactor authentication (MFA) for all interactive sign-ins. This change has sparked a lot of questions across social medias, and in this post, I aim to address these

Continue to read »

To Multitenant or not to Multitenant?

Frank van Zandwijk December 22, 2023

Microsoft in recent months has made leaps and bounds to support Multitenant organizations utilizing Cross-tenant Synchronization to attempt to build a seamless end-user experience. Have they succeeded? Almost! Let’s take a look in this last blogpost of the year. Why even have multiple tenants? In a perfect world, every organization

Continue to read »

Report risky signins past 24 hours

Søren Andersen July 1, 2022

Identity theft is a major concern for most companies. Complex Conditional Access rules/setups may unintentionally leave accounts without multifactor authenticaton. Another aspect of this “not following up” on the technical security features that is set up, is that every day tasks tends to take precedence over tasks that has an

Continue to read »