Some (not so) recent improvements with Lifecycle Workflows in Entra

Back in 2023, Microsoft released the Lifecycle workflow feature, which we covered in this article. Lifecycle workflows are one of the most impactful non-security related features we’ve gotten in the past few years, plus the fact that Microsoft released it with Graph API support from the get go made me …

Continue readingSome (not so) recent improvements with Lifecycle Workflows in Entra

Reporting on unlicensed OneDrive (for Business) accounts in Microsoft 365

Last year, Microsoft announced plans to start charging tenants for data stored in unlicensed OneDrives, that is drives that belong to unlicensed Microsoft 365 users. Unlike Exchange Online, where inactive mailboxes provide you with essentially free retention for the duration of any hold/policies assigned to the user, the functionality to …

Continue readingReporting on unlicensed OneDrive (for Business) accounts in Microsoft 365

Creating a Conditional access policy with Authentication strength control programmatically

I’ve seen a few questions lately on how to programmatically create a Conditional Access policy with Authentication strength  as one of the “grant” controls. For some reason, the documentation doesn’t directly address this scenario, and in turn people seem to get confused, when in fact, it’s rather simple. So in this …

Continue readingCreating a Conditional access policy with Authentication strength control programmatically