Knowledge Base
Find answers to common questions and learn more about our services
Directory sync errors: duplicate attributes
## Overview
Duplicate proxyAddresses or UPNs block object sync—users vanish from cloud groups.
## Detection
Sync error reports in **Entra** + event l...
identity-access-management
msp
seed-library
Feb 22, 2024
Read more →
Hybrid join vs AAD join troubleshooting
## Overview
Devices must land in the correct trust state for policies to apply.
## Hybrid join checks
- **dsregcmd /status** shows AzureAdJoined + Do...
identity-access-management
msp
seed-library
Feb 21, 2024
Read more →
Legacy auth blocking: phased approach
## Overview
Blocking basic auth reduces credential stuffing—but kills old mail clients if unprepared.
## Phase 0
Inventory **sign-ins using legacy pr...
identity-access-management
msp
seed-library
Feb 20, 2024
Read more →
OAuth consent policies for tenant hardening
## Overview
Malicious apps trick users into consent. Restrict consent to admins or verified publishers.
## Policies
- Disable user consent for risky...
identity-access-management
msp
seed-library
Feb 19, 2024
Read more →
App registration secrets rotation cadence
## Overview
Client secrets in app registrations are frequent breach pivots. Automate rotation reminders.
## Standard
- **Max 180-day** secret lifetim...
identity-access-management
msp
seed-library
Feb 18, 2024
Read more →
FIDO2 security keys: ordering and enrollment
## Overview
Phishing-resistant MFA via FIDO2 keys reduces push fatigue compromises.
## Procurement
Standardize **two** approved models for inventory/...
identity-access-management
msp
seed-library
Feb 17, 2024
Read more →
Certificate-based authentication overview
## Overview
CBA binds smart cards or device certs to Entra sign-ins—strong phishing resistance for regulated sectors.
## Prerequisites
- Entra **cert...
identity-access-management
msp
seed-library
Feb 16, 2024
Read more →
Privileged Identity Management quick-start for MSP
## Overview
PIM provides just-in-time admin roles with approvals and logs—essential for Tier-0 protection.
## Start
1. License **Entra ID P2** where...
identity-access-management
msp
seed-library
Feb 15, 2024
Read more →
B2B collaboration cleanup: stale guests
## Overview
Guest sprawl increases accidental oversharing. Clean quarterly or automate with access reviews.
## Process
1. Export guests with **last s...
identity-access-management
msp
seed-library
Feb 14, 2024
Read more →
SSPR rollout and helpdesk expectations
## Overview
Self-Service Password Reset lowers helpdesk volume when authentication methods are enforced.
## Rollout
1. Pilot **registration campaign*...
identity-access-management
msp
seed-library
Feb 13, 2024
Read more →
Entra ID Connect health alerts interpretation
## Overview
Connect Health surfaces sync and ADFS issues early—if ignored, provisioning breaks silently.
## Alerts to prioritize
- **Duplicate attrib...
identity-access-management
msp
seed-library
Feb 12, 2024
Read more →
Break-glass account storage and testing
## Overview
Emergency Global Administrator accounts must exist but never day-to-day use. Follow Microsoft’s break-glass guidance for your stack.
## I...
identity-access-management
msp
seed-library
Feb 11, 2024
Read more →