ENTRA

Configure Entra External Collaboration Settings with Microsoft Graph

Configure Entra External Collaboration Settings with Microsoft Graph

Andres Bohren
Hi All, Recently I had the Task to set up Entra External collaboration settings with PowerShell. According to the Microsoft Documentation you should use the AzureAD PowerShell Module Allow or block B2B collaboration with organizations The retirement of the MSOnline (MSOL) and AzureAD PowerShell Modules has been postphoned many times. The modules will not be supported after March 30 2025. It would certainly work, but that would be only a short time solution.
Runbook to check Entra Apps with expiring ClientSecrets and Certificates

Runbook to check Entra Apps with expiring ClientSecrets and Certificates

Andres Bohren
Hi All, In the previous Article I’ve explained how to check for Entra Apps with expiring ClientSecrets and Certificates. In this Blog Article i explain how we can extend this into a Azure Automation Runbook. Automation Account The Azure Automation Account needs to have a Managed Identity Use the AZ PowerShell to get Infos about the Azure Automation Account ############################################################################### # Get Managed Identity of Azure Automation Account ############################################################################### Connect-AzAccount -Tenant icewolfch.
PowerShell Script to check Entra Apps with expiring ClientSecrets and Certificates

PowerShell Script to check Entra Apps with expiring ClientSecrets and Certificates

Andres Bohren
Hi All, A few years ago, i did write a Script to warn Entra Application Owners about expiring ClientSecrets and Certificates. PowerShell Script to check for AAD Apps with expiring ClientSecrets and Certificates The Script has been using the AzureAD PowerShell Module. Time to renew it to Microsoft.Graph Entra App Registrations Here is the Code to get the Entra App Registration with Microsoft.Graph PowerShell #Connect to Microsoft.Graph Connect-MgGraph -Scopes Application.Read.All -NoWelcome Let’s have a look at a specific Entra Application
Verified ID Advanced Setup

Verified ID Advanced Setup

Andres Bohren
Hi All, Almost a Year ago, I’ve blogged about Microsoft Entra Verified ID Since August 2024 Microsoft Entra Verified ID now generally available Setup Entra Verified ID - Advanced Setup Recently i have been playing around with Entra Verified ID again. This time using Advanced setup. You need to have the “Global Administrator” Role You need to Prepare an Azure Keyvault Step1: Configure organization settings Now let’s dig into the Configuration
Entra Connect Sync 2.4.27 released

Entra Connect Sync 2.4.27 released

Andres Bohren
Hi All, I’ve stumbled by coincidence across the Entra Connect Sync Update 2.4.27. It’s for Download Only, so no Automatic Update. I am running currently Entra Connect Sync 2.4.21.0 Microsoft Entra Connect: Version release history Download Microsoft Entra Connect It’s still a bit a mess with the Product Names. The Product Name is “Microsoft Entra Connect Sync” but the Title ist “Microsoft Entra Connect” and you download “AzureADConnect.msi” 🫣 Installation I’ve downloaded the MSI and here are the Installation Screenshots
Create Passkey in Microsoft Authenticator

Create Passkey in Microsoft Authenticator

Andres Bohren
Hi All, A few weeks ago, i did read the Article The latest enhancements in Microsoft Authenticator on the Entra Blog. The Process of storing a Passkey in Authenticator App has been massivly improved. I’ve tested this on my Android 14 Device. The Passkey has been created It’s explained how to use the Passkey If you click on the URL and choose to use a Passkey It still does not work in the Browser
Entra Connect Sync 2.4.21 released

Entra Connect Sync 2.4.21 released

Andres Bohren
Hi All, Somehow i did miss, that there was an Update for Entra Connect Sync (Azure Active Directory Connect) from July and September. It’s for download only, so no Automatic Update. I am running currently Entra Connect Sync 2.3.20.0 Microsoft Entra Connect: Version release history Download Microsoft Entra Connect It’s still a bit a mess with the Product Names. The Product Name is “Microsoft Entra Connect Sync” but the Title ist “Microsoft Entra Connect” and you download “AzureADConnect.
Register FIDO2 Passkey in Entra ID on behalf of users with PowerShell

Register FIDO2 Passkey in Entra ID on behalf of users with PowerShell

Andres Bohren
Hi All, Recently i was working together with one of my fellows (shout out to Raul Ruta) to figure out how Register Passkeys with the new Microsoft Graph Beta API’s. The only thing we found was the Article of Jan Bakker, that uses the Yubico Sample scripts based on Phyton. Register Yubikeys on behalf of your users with Microsoft Entra ID FIDO2 provisioning APIs I was looking if there is a better way that does not require Phyton and found this PowerShell Module
Entra ID Microsoft Authenticator Registration campain

Entra ID Microsoft Authenticator Registration campain

Andres Bohren
Hi All, I recently had a customer that still allows SMS for MFA Authentication on theyr Entra ID Tenant. We all know, that SMS and Voice, should not be used anymore for MFA Authentication. In addition, i would point out, that can lead to a very bad situation, when using Teams Phone as your Voice destination. Think of how you want to authenticate to Teams, when receiving the MFA Voice call there 😂
SharePoint Online Azure ACS Retirement

SharePoint Online Azure ACS Retirement

Andres Bohren
Hi All, A few Years ago i wrote an Article on how to Grant Access to a Entra App in Sharepoint to upload Files to a SharePoint Site with PnP.PowerShell Upload file to SharePoint Online with PnP.PowerShell I wanted to do the same thing and there is a big red bar on top, that informs about the Azure ACS Retirement in April 2026. Starting April 2, 2026, Azure Access Control service (ACS) usage will be retired for SharePoint in Microsoft 365 and users will no longer be able to create or use Azure ACS principals to access SharePoint.