-
Securing Microsoft Entra Guest Access: Cross-tenant Access Settings and MFA Trust
Securing Microsoft Entra Guest Access means authenticating external users in a controlled manner and clearly defining access to your organization’s resources. Microsoft 365 supports different collaboration models for this purpose. This article focuses on Microsoft Entra B2B collaboration, where a user object in the resource tenant represents the external identity and provides access to Microsoft Teams, SharePoint Online, and other applications.
-
Configure Exchange Online SMTP Relay with a Static Public IP Address
Microsoft has announced the gradual deprecation of Basic Authentication for SMTP AUTH in Exchange Online. Existing tenants will still be able to use the feature for now, but a complete removal is planned in the long term. Details about the current roadmap and the deprecation timeline are published in the Exchange Team Blog: Updated Exchange Online SMTP AUTH Basic Authentication Deprecation Timeline | Microsoft Community Hub
-
Secure Device Registration in Microsoft Entra and Microsoft Intune
By default, users can register devices in Microsoft Entra ID. Each device is represented as an object in Microsoft Entra ID and can be used for authentication and access. Once a user account is compromised, attackers can register their own devices and establish persistent access. Device registration is a security-critical process and must be secured. It is essential to define who is allowed to register devices, under which conditions registration is permitted, and which device types are accepted. Microsoft Entra ID and Microsoft Intune provide multiple control mechanisms that can be combined to enforce these requirements. Only when device registration is properly controlled can device compliance and Microsoft Entra Conditional…
-
Microsoft Entra Global Secure Access Troubleshooting Guide
Microsoft Entra Global Secure Access (GSA) enables secure access to Microsoft 365 services, internet resources, and private applications through a unified endpoint client combined with centrally managed configuration. Issues in Microsoft Entra Global Secure Access can originate at multiple layers, including the client, traffic forwarding profile processing, name resolution, proxy configurations, or the interaction with authentication and Microsoft Entra Conditional Access. Effective Microsoft Entra Global Secure Access Troubleshooting therefore requires a structured approach to root cause analysis. This article outlines relevant troubleshooting steps on the client side and within the Microsoft Entra admin center, and explains how to systematically identify and resolve issues. Insights gained from real world deployments are…
-
Microsoft Entra Backup and Recovery: Prerequisites, Backup, and Restore in Detail
Microsoft Entra Backup and Recovery is a backup and recovery capability for directory objects that is natively integrated into Microsoft Entra. Supported objects are automatically backed up once per day and retained for five days (backup history). Microsoft Entra Backup and Recovery helps restore identity objects, policies, and application objects to a previously known state after unintended or unwanted changes.