There is a lot of noise about Microsoft Agent 365 right now. Most of it is aimed at MSPs, partners, and IT decision makers asking, "what is it and should we buy it." That is a fair question, but it is not the one I want to answer

Introduction AI agents are proliferating inside enterprise Microsoft tenants faster than identity teams can govern them. Copilot Studio, Azure AI Foundry, Security Copilot, and Agent 365 are all creating agent identities — each with permissions, service principals, and access to organizational data. The question nobody is asking loudly enough is: who

TL; DR Microsoft will retire the Microsoft Entra Privileged Identity Management (PIM) Iteration 2 (beta) APIs on October 28, 2026. Any automation, scripts, or integrations using the /beta/privilegedAccess endpoints will stop working after this date. If you manage privileged access using automation, you must migrate to Iteration 3 (Generally

Introduction If you configured your risk policies directly in Microsoft Entra ID Protection — User risk policy and Sign-in risk policy, they are already read-only since July 2025. On October 1, 2026, they stop enforcing entirely. Silently. No warning at runtime. Users who should be blocked or challenged will not be.

Entra Passkey Profiles: Why You Need to Intercept the 2026 Migration Now If you’ve logged into your Entra portal lately, you’ve seen the banner. Microsoft is pushing us toward a "new experience" for Passkeys. While the prompt looks like just another UI update, there is a

By May 2026, every Entra tenant will be migrated to the new Passkey Profiles model. If you haven't opted in, Microsoft will apply its own defaults, potentially enabling synced passkeys for your entire org. This lab-proven guide shows you how to intercept the migration, configure high-assurance profiles, and

The problem this solves — the signal gap Microsoft Entra ID Protection has always been good at detecting identity-specific risks — leaked credentials, impossible travel, anonymous IP addresses, suspicious sign-in patterns. But there was a blind spot. A user's device could be actively compromised, flagged as high risk in Microsoft