Topic
10 articles
If you’re managing Entra ID (Azure AD), you’re facing constant attacks. The single most effective way to protect your tenant is with Conditional Access. But don’t just click around in the portal—deploy your security as code. We’ll build a simple, modular, and production-ready Terraform framework to deploy this “Top 4” set. The “Top 4” Critical …
Introduction A critical flaw in Microsoft Entra ID (formerly Azure Active Directory) — CVE-2025-55241 — reminds us how fragile cloud identity can be when legacy token flows linger. While Microsoft has already patched the issue, the lessons go far beyond a single CVE. At Terait, we help organizations secure Entra ID and Azure identity services. …
Introduction Managing access to resources in any organization is crucial for security, compliance, and operational efficiency. Microsoft Entra ID (formerly Azure AD) provides governance features to help organizations control who has access to what and ensure that access is granted appropriately. Two key features that help with access management are: Although both play a role …
Why Do You Need This Script? Organizations register applications in Entra ID to authenticate users and grant access to Microsoft services. However, some apps:🔹 Lose valid secrets or certificates and stop working🔹 Remain unused for long periods but retain permissions🔹 Can be exploited if left unmanaged IT administrators need to identify unused applications and those …
Why Do You Need This Script? Guest users in Entra ID (formerly Azure AD) are external users invited to collaborate within an organization. However, many guests:🔹 Never accept their invitations🔹 Stop using their accounts after a period of time🔹 Pose a security risk if their access isn’t revoked To maintain security and compliance, IT administrators …
In today’s post, I’ll explain how to use the Azure AD or Entra ID Connect Configuration Documenter to compare configurations between two Azure AD Connect servers. This tool is valuable for documenting, troubleshooting, and ensuring configuration consistency in environments that use Azure AD Connect for identity synchronization. The Azure AD Connect Configuration Documenter is a …
To assign an Access Package to 1,000 users in Azure Active Directory (Entra ID) using Entitlement Management in Azure Identity Governance, you can either use the Azure Portal or automate it via PowerShell or Microsoft Graph API, which is more efficient for large-scale assignments. Here are the steps for each method: Method 1: Using Azure …
Managing user profile photos within Microsoft Entra ID (formerly Azure AD) can be tedious if done manually, especially for large organizations. In this post, I will walk you through automating two key tasks using PowerShell and the Microsoft Graph API: By the end of this guide, you’ll be able to retrieve all users, identify those …
Here’s a PowerShell script that allows you to enable, check, disable, or uninstall TLS 1.2 on your Microsoft Entra Connect server. It prompts the user for an option and performs the corresponding action: Get-ADSyncToolsTls12RegValue { [CmdletBinding()] Param( [Parameter(Mandatory = $true, Position = 0)] [string]$RegPath, [Parameter(Mandatory = $true, Position = 1)] [string]$RegName ) $regItem = Get-ItemProperty …
In today’s post, I would like to explain how to properly remove a domain from the Azure AD Connect synchronization process without causing errors, such as the missing-partition-for-run-step error. Specifically, we’ll discuss removing contoso.com from the sync process in Azure AD Connect. Steps to Remove a Domain from Azure AD Connect Sync: Backup Configuration:Before making …