📄

Identity Security

5 articles in this category

Identity SecurityJun 28, 2026

SyncJacking: Protect Privileged Entra Identities from AD Sync Takeover

SyncJacking is an attack technique that exploits Entra Connect Sync hard-matching to let an on-premises AD attacker take over cloud-privileged Entra ID accounts. Microsoft enforced hard-match blocking for role-assigned users on June 1, 2026, but most tenants still have gaps. Here is how to audit your hybrid environment and lock down privileged identities before attackers exploit the window.

entra-idactive-directoryzero-trust

📄

Identity Security14 min readJun 18, 2026

JWT Complete Guide: Structure, How It Works, and Security

JWT (JSON Web Token) is the token format that powers modern API authentication, OAuth 2.0, and enterprise SSO. This guide explains exactly what a JWT contains, how the three-part structure works, its relationship to OAuth 2.0 and OIDC, how to generate tokens securely, and the attacks that break insecure implementations.

JWTJSON Web TokenOAuth 2.0

📄

Identity Security16 min readJun 18, 2026

NHI (Non-Human Identity) Governance: Beyond the Basics

A leaked service principal secret with Contributor access caused a lateral movement chain that took three days to contain. Most organizations have more non-human identities than users, but fewer than 10% have a credential rotation policy that actually runs. This guide covers credential lifecycle automation, ownership attribution, workload identity federation, and the KQL queries that surface your riskiest NHIs before they become incidents.

Non-Human IdentityNHI SecurityWorkload Identity

📄

Identity Security15 min readJun 16, 2026

Entra ID External Identities Security: Governing B2B Guest Access at Scale

The average enterprise Entra ID tenant has a guest-to-member ratio approaching 1:1, and most of those guest accounts predate the conditional access policies built for employees. This guide covers Cross-Tenant Access Settings, invitation restrictions, CA policy gaps, Azure RBAC cleanup, Entra ID Access Reviews with auto-deny, and the KQL queries needed to find stale guests before they become incidents.

Entra IDB2B Guest AccessIdentity Security

📄

Identity Security18 min readMay 19, 2026

Entra ID Workload Identity Federation: Replacing Secrets with Certificates at Scale

Most Azure tenants accumulate hundreds of client secrets across service principals, with no owner tracking and no rotation discipline. Workload identity federation eliminates this category of risk entirely by replacing stored credentials with OIDC token exchange. This guide covers the migration playbook from secrets to federation across GitHub Actions, Terraform, and AKS at scale.

Entra IDWorkload IdentityFederated Credentials

Explore Other Categories

📝AI Security(22)⚙️Cloud Engineering(1)☁️Cloud Security(40)🔐Cybersecurity(13)🌐Networking(2)📝Security Tools(1)🛡️Zero Trust(10)