Tag · 5 articles

Entra ID

Oct 6, 2026 · 10 min read

SCIM Endpoint Security: How to Lock Down a Provisioning API Before It Leaks Your Directory

SCIM endpoint security comes down to six controls: token scope, filter and pagination limits, attribute-level returns, PATCH authorization, Bulk limits, and audit logging. Here is how to test and fix each one with curl and server-side examples.

Oct 1, 2026 · 6 min read

Storm-3068: How SSPR Abuse Turns One Azure AD Account Into Kubernetes Credential Theft

Microsoft's Storm-3068 campaign chains self-service password reset abuse, MFA method hijacking, and Azure DevOps pipeline manipulation to steal Kubernetes kubeconfig files. Here's the exact attack chain and the SSPR, Conditional Access, and RBAC controls that stop it.

Jun 15, 2026 · 10 min read

Entra ID Federation: External IDPs

Learn how to configure Microsoft Entra ID Federation with external identity providers for seamless SSO. Step-by-step guide with code examples and security tips.

Feb 26, 2026 · 4 min read

Microsoft’s Entra OAuth Tokens Could Be Exploited - What You Need to Know

Microsoft’s Entra OAuth tokens were recently found vulnerable to exploitation. Learn how this affects your security and what steps to take to protect your applications. Feb 5, 2026 · 6 min read

IAM Platform Evaluation Framework: How to Choose Between Keycloak, Auth0, Okta, and Entra ID

IAM platform evaluation framework comparing Keycloak, Auth0, Okta, and Entra ID across cost, scalability, extensibility, compliance, and operational overhead to help enterprises choose the right identity provider.