Tag: Entra ID | Andy Kemp Consulting

13 Aug 2026

Giving SaaS Applications a Fixed Egress IP with Microsoft Entra Private Access"

Use Microsoft Entra Private Access source IP anchoring to give IP-restricted SaaS applications a controlled and predictable public egress address.

Microsoft Global Secure Access · Part 1

Compliance & Governance Global Secure Access Microsoft Microsoft 365 Security Security Strategy Zero Trust Cyber Security Entra Identity #Cloud Security Strategy #Conditional Access #Cyber Security #Devices #dns #Entra ID #GSA #identity #Microsoft 365 #Windows11 #Zero Trust #ZTNA #Security Architecture #Security #Windows Hello for Business

8 Aug 2026

Authentication Assurance – Introduction

An introduction to Authentication Assurance and why modern identity security is about more than simply enabling MFA or going passwordless.

Authentication Assurance

Cyber Security Microsoft Microsoft 365 Security Zero Trust Passwordless Privileged Access Privileged Identity Security Strategy #Continuous Improvement #Entra ID #Microsoft #Microsoft 365 #Microsoft Entra #Zero Trust #Conditional Access #Consulting #Cloud Security Strategy #Cyber Security #FIDO2 #entra-id #Endpoint Security #Identity and Access Management #Phishing-Resistant Authentication #Passwordless #Passkeys #Privileged Access #Privileged Identity #Security

6 Aug 2026

Physical Privileged Access Workstations

Discover why dedicated physical Privileged Access Workstations remain the highest assurance option for protecting privileged identities and securing administrative environments.

Privileged Access Workstations · Part 3

Cyber Security Entra Microsoft 365 Security Privileged Access Privileged Identity Zero Trust #Cyber Security #Entra ID #Microsoft Entra #PAW #Privileged Access #Privileged Identity #Zero Trust

4 Aug 2026

Privileged Access Workstations: Introduction

An introduction to Privileged Access Workstations (PAWs), why they matter, and how they fit into a modern privileged identity strategy using Microsoft Entra.

Privileged Access Workstations

Cyber Security Entra Privileged Access Privileged Identity Security Strategy Zero Trust #Continuous Improvement #Cyber Security #Entra ID #Microsoft Entra #PAW #Zero Trust

29 Jul 2026

From Tier 0 to Trust Levels: Rethinking Privileged Access for the Cloud Era

Traditional administrative tiering was built for an infrastructure-centric world. As organisations move to cloud-native identities, Zero Trust and passwordless authentication, t...

Cyber Security Entra Privileged Access Privileged Identity Security Strategy #Cyber Security #Enterprise IT #Entra ID #Microsoft Entra #Privileged Access #Privileged Identity

28 Jul 2026

Passkeys: The Hardest Part Nobody Talks About

Passkeys are transforming authentication, but the technology is not the hardest part. Learn why onboarding, bootstrapping, Temporary Access Passes (TAPs), Conditional Access and...

Entra Microsoft 365 Security Zero Trust #Authentication Strategy #Conditional Access #Entra ID #FIDO2 #identity #Identity and Access Management #Passkeys #Passwordless #Phishing-Resistant Authentication #Zero Trust

1 Jun 2026

Windows Hello for Business Is More Than a Login Method

Most organisations think their phishing-resistant authentication journey starts with passkeys. In reality, many have already deployed one of the most important phishing-resistan...

Consulting Cyber Security Entra Microsoft Microsoft 365 Security Zero Trust #Authentication Strategy #Entra ID #Identity and Access Management #Passkeys #Passwordless #Phishing-Resistant Authentication #Windows Hello for Business #Zero Trust

21 Nov 2025

Applications – The Third Pillar of Zero Trust

Introduction In the first two posts of this Zero Trust series, we established that identity is the new perimeter and devices are the frontline of defence. By verifying every use...

Cyber Security Entra Microsoft Privileged Access Privileged Identity Zero Trust #Conditional Access #Entra ID #Microsoft #Zero Trust

31 Oct 2025

Identity: The New Perimeter in Zero Trust

Welcome to the first deep dive in my Zero Trust blog series. If you’ve read the series introduction, you’ll know that Zero Trust isn’t a single product or a quick…

Azure Cyber Security Entra Microsoft Passwordless Privileged Access Privileged Identity Zero Trust #Entra ID #Microsoft #Privileged Access #Privileged Identity #Zero Trust

11 Aug 2025

Automate Your Elgato Key Light Air with Microsoft Teams Presence

Introduction If you’re anything like me, you’ve probably joined a video call only to realise your lighting isn’t quite right. I use an Elgato Key Light Air, and I wa...

Automation Azure Entra Mac OS Microsoft Graph Python Scripting Ubuntu #Azure #Elgato Keylight Air #Entra ID #Microsoft Graph #Scripting #Ubuntu #linux #python

8 Jun 2025

Deploying Azure Virtual Desktop – A Modular, Automated Approach

Introduction Azure Virtual Desktop (AVD) is Microsoft’s comprehensive Desktop-as-a-Service platform, enabling secure remote access to Windows desktops and apps from virtual...

Automation Azure Azure Virtual Desktop Entra Infrastructure as Code Intune Microsoft Microsoft Graph PowerShell Scripting Virtual #AVD #Azure #Conditional Access #Entra ID #Microsoft #Microsoft Graph #PowerShell #Virtual #automation #azure-ad #bicep #dns #enterprise #fslogix #hybrid-join #identity #infrastructure-as-code #rbac #remote-desktop #storage

9 May 2025

Using Cloud PKI with Always On VPN

Using Microsoft Cloud PKI With Always On VPN Introduction I have been playing around with Always On VPN recently. Using it with Domain, Hybrid and Entra Joined devices. As you&#...

Intune Microsoft Uncategorized Windows 11 #Entra ID #Intune #Microsoft #Windows 11

23 Mar 2025

Virtual PAW – Part 4 – Completing the basic setup

So this is part 4 of my multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction In this part I’ll go…

Azure Azure Virtual Desktop Entra Microsoft Microsoft Graph PowerShell Privileged Access Privileged Identity Scripting Uncategorized Virtual #Azure #Entra ID #Hosting #Microsoft #Microsoft Graph #PowerShell #Privileged Access #Privileged Identity #Virtual

27 Feb 2025

Virtual PAW – Part 3 – Deploying the session hosts

So this is the 3rd part of a multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction Welcome to the 3rd…

Azure Azure Virtual Desktop Entra Microsoft PowerShell Privileged Access Privileged Identity Scripting Virtual #Azure #Entra ID #Microsoft #PowerShell #Privileged Access #Privileged Identity #Virtual

14 Feb 2025

Virtual PAW – Part 1 – A high level overview

I have decided to create this as a multi part post to hopefully make it easier to understand. Introduction So Following on from my last post I thought I’d share…

Azure Azure Virtual Desktop Entra Microsoft Privileged Access Privileged Identity Scripting Uncategorized Virtual #Azure #Azure Virtual Desktop #Entra ID #Microsoft #Privileged Access #Privileged Identity #Virtual

5 Feb 2025

Why use a PAW?

Introduction Following on from my previous post I have been asked why I use a PAW for my own tenant, and or why not just use a conditional access policy…

Azure Azure Virtual Desktop Entra Microsoft Microsoft Graph Privileged Access Virtual #Entra ID #Microsoft #Privileged Access #Privileged Identity #Virtual

15 Jan 2025

Securing my privileged access with AVD

I’m trying to “lead by example” (I use that term loosely), when it comes to privileged access. A bit of background For a long time my regular Microsoft 365 acc...

Azure Azure Virtual Desktop Entra Microsoft Privileged Access Privileged Identity Virtual #AVD #Azure #Entra ID #Microsoft #Privileged Access #Privileged Identity #Virtual

24 May 2024

Creating Multiple Security Groups in Microsoft Entra

I was recently asked if there was a quick way to create 180 plus Security Groups in Microsoft Entra. I used to do a lot of PowerShell Scripting but not…

Microsoft Microsoft Graph PowerShell Scripting #Entra ID #Microsoft #Microsoft Graph #PowerShell #Scripting