Microsoft now offers Entra Private Access and Internet Access as one: Global Secure Access. What it changes for your VPN, what is GA, and how to start.

Attackers got into Microsoft 365 accounts at 79 organizations without a password. Why a password reset is not an eviction, and the seven-step checklist our experts use.

From October 30, Microsoft Entra ID lets you keep SMS and voice MFA after February 1, 2027 with your own telephony provider. Dates, costs and a simple way to decide who still needs it.

What a Temporary Access Pass in Microsoft Entra ID is and is not, the settings that matter, three scenarios where it helps and the mistakes to avoid.

A 90-day passkey rollout plan for Microsoft Entra ID: what admins configure, how users register and recover, and when to enforce phishing-resistant MFA.

Microsoft stops sending Entra MFA texts and calls on Feb 1, 2027. Compare a telephony provider vs. passkeys, costs, risks and how to decide.

Authentication strengths let Conditional Access require specific sign-in methods. Use the built-in Phishing-resistant MFA strength, tested in report-only mode and rolled out in waves, to stop accepting SMS and voice for sensitive access.

Your organization is ready for passwordless when you know who still uses SMS or voice, every persona has a supported passkey, devices meet minimum versions, recovery is defined and enforcement can run in report-only mode first.

A passkey replaces a password or SMS code with a cryptographic key that never leaves the user’s device and only works on the real website, so it cannot be phished, guessed or reused.

To move users off SMS and voice MFA in Microsoft Entra ID, find who still depends on them, enable passkeys, run a registration campaign, cover every device and enforce phishing-resistant MFA in waves.