Manage MFA, passkeys, and self-service password reset in Microsoft Entra ID
How to manage authentication methods, passkeys, Temporary Access Pass, MFA, and SSPR with secure registration and helpdesk fallback paths.
Read articleKN-Consult · Blog
Microsoft Entra
Practical knowledge for your digital workplace.
Set up Privileged Identity Management: activate admin rights only when needed
Learn how to configure Microsoft Entra Privileged Identity Management for time-limited admin rights, approvals, MFA, notifications, and reviews.
Read articleExternal collaboration in SharePoint: guest users, B2B portals, and secure sharing
How to securely set up external collaboration in SharePoint: Invite guest users via Entra ID, understand sharing levels, and log access in compliance with GDPR.
Read articleAutomating the user lifecycle in Microsoft Entra ID: joiners, movers, and leavers
Learn how to automate entry, role changes, and exit using reliable HR data, groups, licenses, lifecycle workflows, and controlled exceptions.
Read articleCheck app permissions and admin consent: identify overprivileged applications
Learn how delegated permissions, application permissions, user consent, admin consent, and publisher verification are controlled and evaluated in Microsoft Entra.
Read articleAssess a Microsoft 365 tenant: technical inventory before operations or a handover
Review, document, and prioritize a Microsoft 365 tenant before taking over operations, improving security, or reorganizing its configuration.
Read articleManage guest accounts and external identities in Microsoft Entra ID
Learn how to manage B2B guest users, cross-tenant access, conditional access, sponsors, expiration, and logging for external collaboration.
Read articleMonitor Entra app secrets and certificates and renew them before expiration
Learn how to inventory, monitor, rotate with an overlap period, and renew client secrets, certificates, and federated credentials without application downtime.
Read articleAccess Reviews in Microsoft Entra ID: confirm or automatically revoke access regularly
How to plan, test, and securely evaluate recurring Access Reviews for groups, enterprise applications, guests, and privileged access.
Read articleEnterprise Applications vs. App Registrations in Microsoft Entra ID
Understand how application objects, service principals, App Registrations, and Enterprise Applications relate, and where each setting is managed.
Read articleConditional Access in Microsoft Entra ID: secure implementation without blocking users
How to implement Conditional Access policies safely using Report-only mode, pilot groups, What-If tests, sign-in logs, and documented fallback paths.
Read articleOutsource Microsoft 365 administration: tasks, responsibilities, and operating model
How companies control the outsourcing of Microsoft 365 and Entra administration, separate responsibilities, and build a transparent ongoing operation.
Read article