External MFA dans Microsoft Entra ID est disponible : ce qu'il faut savoir ! Le 24 mars 2026, Microsoft a annoncé la disponibilité de la fonctionnalité MFA externe dans Entra ID. Qu'est-ce que ça change ? Voici l'essentiel à savoir.

🆙 Entra ID : External MFA (GA)

Microsoft a annoncé la disponibilité générale de la fonctionnalité d'authentification multifactorielle (MFA) externe, le 24 mars 2026.

✍️ www.it-connect.fr/external-mfa...

#MFA #Microsoft #EntraID #ZeroTrust

A Token of Appreciation - JWTs & Microsoft Authentication for Security Research A practical foundation for Microsoft security research - covering JWT structure, token claims, OAuth 2.0 flows, and why proper validation is where vulnerabilities hide.

If you're curious about how Microsoft access tokens work under the hood, maybe it's useful to you too. I call it "A Token of Appreciation" 😜

securitywithtom.com/posts/A-Toke...

#Microsoft #EntraID #JWT #IdentitySecurity #SecurityResearch

Restricted Site Creation Control for Apps This article discusses the use of restricted site creation for apps. The feature has an allow or deny list to identify apps that can create new sites.

Should #EntraID apps be allowed to create #SharePoint Online sites? If you want to control this activity, there's a new policy to stop 3rd party (including tenant) apps creating new sites. Here's the detail: office365itpros.com/2026/04/02/r...
#Microsoft365

Original post on infosec.exchange

EvilTokens; new PhaaS actively targeting Microsoft 365 via Device Code Flow abuse.

The attack abuses the legitimate OAuth Device Authorization Grant. The attacker sends you a code, you enter it on the REAL microsoft.com/devicelogin page and they get your tokens. MFA bypassed. Password reset […]

External MFA dans Entra ID : Microsoft réconcilie enfin Zero Trust et réalité des SI hybrides Il y a des annonces Microsoft qui font naître un enthousiasme poli, et d'autres qui font vraiment lever les yeux au ciel aux architectes IAM en se demandant pourquoi cela a pris autant de temps. La disponibilité générale de l'External MFA dans Microsoft Entra ID appartient, sans conteste, à la seconde catégorie. Rappelons le contexte. Microsoft Entra ID, anciennement connu sous le nom d'Azure Active Directory, est l'un des systèmes de gestion des identités et des accès (IAM), sans surprise, les plus utilisés dans les environnements d'entreprise. 

Microsoft Entra ID passe à la MFA externe en GA : fini le grand écart entre identité centralisée et fournisseurs tiers. OIDC, Conditional Access préservé, Custom Controls en sursis jusqu'en sept. 2026.
#EntraID #MFA #ZeroTrust #IAM #Cybersécurité

New Entra Admin Roles Are NOT Automatically Protected by Conditional Access I came across a great reminder from Andy Ballard that’s worth calling out because it’s one of those things that’s easy to miss but has serious security impact. If you’re relying on Conditional Access policies scoped to admin roles, new roles added to Entra are not automatically included. That means you could already have privileged roles in your tenant today that are…

New Entra admin roles aren’t automatically covered by Conditional Access, leaving real security gaps in #Azure. Now’s the time to review your CA policies and close them.

Great callout from Andy Ballard at Quisitive 👏

#EntraID #MVP #IdentitySecurity

Microsoft Configuration Manager - Folge 15 - Softwareverteilung mit dem Configuration Manager
#Microsoft #ConfigurationManager #Intune #MDM #MAM #CoManagement #MicrosoftAzure #EntraID #mvpbuzz #coolstuff
👇👇👇👇
youtu.be/ebFFILpBujA

How to Report Entra ID Group Insights Entra ID Group Insights are a new preview feature in the Entra admin center. The lack of documentation is challenging, but it's easy to understand the output

#EntraID group insights give #Microsoft365 tenant admins some hints about improving their groups. Most of the hints are easily recreated using #PowerShell. Here's how to read the insights data and add to it to create better information: office365itpros.com/2026/03/31/e...

Use Conditional Access Policies to Block Weekend Access Conditional access policies are very powerful. A beta feature appears to support time-limited blocks, but maybe that's not needed because it can be done now.

A beta (but undocumented) condition for #EntraID CA policies apparently supports time-restricted access. Even without the feature, CA policies remain the best way to limit user access to #Microsoft365.
office365itpros.com/2026/03/30/c...

Entra ID Backup and Recovery Microsoft Entra Backup and Recovery provides fast, reliable restoration of your tenant after malicious attacks or accidental changes. It automatically captures daily snapshots of core Entra objects, a...

🚀 New blogpost: Entra ID Backup & Recovery
Native backups, restore points, and diff reports for your tenant.
Why this is a big step for identity resilience 👉 idefixwiki.no/post/Entra-I...

#EntraID #Security #backup #backuprestore

External MFA in Microsoft Entra ID is now Generally Available | Microsoft Community Hub External MFA in Microsoft Entra ID is GA, enabling integration with third-party MFA while maintaining Conditional Access and risk-based policies.

🚀 #External #MFA in Microsoft #EntraID is now Generally Available
techcommunity.microsoft.com/blog/microso...

Microsoft Entra External MFA Reaches General Availability -- Redmondmag.com Feature allows organizations to use third-party authentication providers with Entra ID.

Microsoft has made external MFA generally available in Microsoft Entra ID, enabling third-party MFA integration for more flexible identity and compliance workflows.

See what this means for identity strategy: https://ow.ly/FgrC50YyELq

#Microsoft #EntraID #MFA

Hybrid identity is a prime target for modern attackers.

Join us, sponsor Cayosoft, and expert Craig Birch tomorrow for this FREE webcast on hybrid identity security, recovery and resilience.

Register now: https://ow.ly/YIUv50YyE49

#HybridIdentity #IdentitySecurity #ActiveDirectory #EntraID

Microsoft Defender Revelation Poses Troubling Questions Microsoft disclosed that Entra ID login events were missing from Microsoft Defender for Cloud Applications for nine months — and waited more than three months after the fix to tell customers. Here's w...

For months, the Microsoft Defender for Cloud Apps solution was deprived of important #EntraID data due to a bug. All explained by Paul Robichaux here.
office365itpros.com/2026/03/25/d...
#Microsoft365

Microsoft hands Entra ID users new option for MFA - Help Net Security Microsoft Entra ID now supports external MFA, enabling secure integration of third-party providers with Conditional Access policies.

Microsoft hands Entra ID users new option for MFA

📖 Read more: www.helpnetsecurity.com/2026/03/25/m...

#cybersecurity #cybersecuritynews #EntraID #MFA #authentication @microsoft.com

New video looking at Entra Backup and Recovery and how we combine it with existing soft delete and protected actions to provide protection from malicious and accidental actions.

youtu.be/72nowrDIlQU

#microsoft #entraid #security

Microsoft's new Entra ID feature fixes a huge MFA limitation Microsoft just made a long-awaited Entra ID change that could reshape how enterprises handle authentication moving forward.

Microsoft just made a long-awaited Entra ID change that could reshape how enterprises handle authentication moving forward. #Microsoft #EntraID #MFA

Entra ID Backup and Recovery Has a Low-Key Preview Microsoft released the preview of the Entra ID Backup and Recovery solution to tenants on 19 March 2026. No real details are available yet from Microsoft.

The debut of the preview of #EntraID Backup and Recovery was curiously low-key with the announcement buried in a blog post about the RSA conference. But the software's available in tenants and it works. Here are the details: office365itpros.com/2026/03/23/e...
#Microsoft365

#microsoftentra #entraid #microsoftsecurity #identitysecurity #iam #zerotrust #cloudsecurity #governança #tier0 #m365 #segurançadainformação #riskmanagement #administraçãodeti | Mauricio Cassemiro O 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗘𝗻𝘁𝗿𝗮 𝗕𝗮𝗰𝗸𝘂𝗽 🛢️ não é “feature legal”. É controle de sobrevivência do Tier 0! A comunidade está comemorando o Microsoft Entra Backup/Recovery como se fosse “mais um produto”. Eu vejo dif...

Se o 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗘𝗻𝘁𝗿𝗮 cair, sua operação cai junto.
A Microsoft finalmente mexeu nisso.
O detalhe é como — e o que continua sendo sua responsabilidade. Dá uma lidinha... 👉🏼 www.linkedin.com/posts/mauric...

#MicrosoftEntra #EntraID #MicrosoftSecurity #IdentitySecurity #IAM #ZeroTrust #CloudSecurity

📰 Pembaruan Windows 11 Edisi Maret Picu Bug Eror Login Teams dan OneDrive

👉 Baca artikel lengkap di sini: ahmandonk.com/2026/03/22/bug-pembaruan...

#akunMicrosoft #beritaTeknologi #bugWindows11 #entraId #kb5079473 #microsoft #microsoftTea

Hybrid identity is a prime target for modern attackers.

Join us, sponsor Cayosoft, and expert Craig Birch on March 26th for this FREE webcast on hybrid identity security, recovery and resilience.

Register now: https://ow.ly/Ci1b50Ywyay

#HybridIdentity #IdentitySecurity #EntraID

Azure Bastion Enter ID auth: Not for free SKU! VM needs Win 10/11 or Server 2022+ with AAD extension. RBAC roles are crucial: Reader on VM, NIC, Bastion, VNet. Missing one? Enter ID won't appear!
Full Video: youtu.be/fiPqKI16XiA
#Azure #Microsoft #EntraID #CloudSecurity #Bastion #MVPBuzz

DUDE Manager is now listed on Awesome Intune! 🎉

Free open-source tool for automating group membership, Admin Units, tags & delegation across Intune, Entra ID and Defender for Endpoint.

👉 awesomeintune.com/tools/dude-m...

#MicrosoftIntune #EntraID #PowerShell

EntraFalcon update 🚀 The new Security Findings Report turns Entra ID enumeration into actionable findings with 60+ checks and colorful charts. Read Chrigi's @zh54321.bsky.social blog and try the tool now on your tenant!

blog.compass-security.com/2026/03/from...

#EntraID #CloudSecurity #EntraFalcon

@liorbela.bsky.social
[New Post] 📌How to Audit Security Dynamic Group Membership Changes using Microsoft Graph API - www.anoopcnair.com/audit-securi...
#MicrosoftGraph #GraphAPI #MicrosoftEntra #EntraID #MSIntune #HTMDCommunity

Microsoft Configuration Manager - Folge 14 - Das Microsoft Win32 Content Prep und das MSIX Packaging Tool
#Microsoft #ConfigurationManager #Intune #MDM #MAM #CoManagement #MicrosoftAzure #EntraID #mvpbuzz #coolstuff
👇👇👇👇
youtu.be/cIanFGMLqCs

Enabling Entra ID Login Through Azure Bastion for Secure VM Access - Ciraltos Unlock Secure Azure VM Login with Entra ID + Bastion—No RDP Ports, No Public IPs Needed!

Still opening RDP to the internet? It’s time to stop. 🚫
Watch how Azure #Bastion + Entra ID gives you fast, secure Remote Access without public IPs. A huge win for Cloud Security and admins everywhere.
buff.ly/oYQV8h9
#Azure #Microsoft #EntraID #CloudSecurity @azureweekly.endj.in #MVPBuzz

RDP port 3389 exposed? Big no-no. Azure Bastion just got WAY better, letting you sign in to Windows VMs with Entra ID directly from the portal. No more complex setups!
Full Video: youtu.be/fiPqKI16XiA
#Azure #Microsoft #RemoteAccess #EntraID #CloudSecurity #Bastion #MVPBuzz

Hybrid identity is a prime target, and attackers know where the gaps are.

Join us, sponsor Cayosoft, and expert Craig Birch on Mar. 26 for this FREE webcast on hybrid identity security and recovery.

Register now: https://ow.ly/t1cC50Ytp9P

#IdentitySecurity #ActiveDirectory #EntraID

Stop exposing RDP! Azure Bastion now supports Enter ID login for Windows VMs, ditching public IPs and open ports. One-click access, finally!
Full Video: youtu.be/fiPqKI16XiA
#Azure #Microsoft #RemoteAccess #EntraID #CloudSecurity #Bastion #MVPBuzz