Notes on Microsoft identity security, from the architecture up.
Practical writing on Entra ID, Conditional Access, privileged access and identity governance.
Phishing-resistant MFA: what actually counts
Not every second factor survives an adversary-in-the-middle. A short guide to which methods do, and how to enforce them in Entra.