Modern Workplace - From my point of view

Welcome to the fourth installment of my summer roundup series. While Microsoft 365 Copilot and AI features have dominated many of the recent headlines, Microsoft has also announced several important changes in Microsoft Entra ID that deserve attention from identity and security administrators. In this post, I'll highlight two updates related to authentication and access management. One strengthens the security posture of Self-Service Password Reset (SSPR) by requiring users to register authentication methods explicitly, while the other marks the beginning of the end for Custom Controls in Conditional Access as Microsoft transitions organizations to the newer External MFA framework. Microsoft Entra ID strengthens Self-Service Password Reset verification requirements Microsoft is making an important security change to Microsoft Entra ID Self-Service Password Reset (SSPR) by requiring users to verify their identity using explicitly registered authentication methods. Today, some users ...