Conditional Access Framework (2026.6.1)
I few weeks ago (June 11th), I have launched an updated version of my Conditional Access Framework. Version 2026.6.1 includes one updated policy and multiple
// THE BLOG
MFA articles.
Field notes on the modern workplace. Real challenges, practical solutions.
Conditional Access Visualizer & Deployer Tool
Conditional Access management is critical, but reviewing and documenting policies in the Entra portal can be slow and fragmented. This web app gives security and
The long awaited DMA-SSO Admin Controls!
As part of Microsoft’s compliance with the EU Digital Markets Act (DMA), Windows did change the way how Single Sign-On (SSO) works. Users in the
Conditional Access Framework (2026.2.1)
Today, I have launched an updated version of my Conditional Access Framework. Version 2026.2.1 includes one updated policy and one new policy designed specifically for
Conditional Access Framework (2025.2.3)
Today I’ve released a new version of my Conditional Access Framework. Version 2025.2.3 has one modified and one new policy which are meant for internals.
Conditional Access Framework (2025.2.2)
Today I’ve released a new version of my Conditional Access Framework. Version 2025.2.2 has some additional policies which are meant for internals admins. In short:
Conditional Access Framework (2024.6.1)
Today I’ve released a new version of my Conditional Access Framework. The previous version (2024.4.1) was mostly focused on Windows Modern Workplace environments. Version 2024.6.1
Conditional Access Framework (2024.4.1)
Few months ago i decided to redesign my Conditional Access Framework. While reading some docs and blogs for recent changes i found Claus Jespersen his
Require MFA for Microsoft Admin Portals
Microsoft has released (globally available) a new form of Conditional Access (CA) policies. This CA policy requires users to use MFA when accessing admin portals.
Protect (handle) users not protected by MFA
Protecting users and authentications with MFA is one of the most important things to do. Users need to identify their authentications with at least one