Oliver Müller

Microsoft Entra Private Access: Secure Access for External Users to Internal Resources - cloudcoffee.ch Microsoft Entra Private Access External Users: prerequisites, tenant switching, client configuration and key operational considerations.

🔐 Microsoft Entra Private Access now supports external users.

External identities can access internal resources through Global Secure Access without VPN.

Full guide: bit.ly/4bg7Hfd

Would you consider using Entra Private Access for external users?

#MicrosoftEntra #CloudSecurity #IAM #ZTNA

Microsoft Entra Private Access BYOD: Access Internal Resources with Entra Registered Devices - cloudcoffee.ch Microsoft Entra Private Access BYOD enables access to internal resources using Entra registered devices.

Microsoft Entra Private Access now supports BYOD in Public Preview.

Microsoft Entra registered devices can securely access internal resources via the Global Secure Access client without requiring Microsoft Entra joined or Microsoft Entra hybrid joined status.

Full guide: bit.ly/4bVuajA

Intelligent Local Access in Microsoft Entra Global Secure Access - cloudcoffee.ch Intelligent Local Access Microsoft Entra Global Secure Access: local access without routing through the SSE, explained using a practical example.

🔐 Intelligent Local Access in Microsoft Entra Private Access

By default, Entra Private Access traffic goes through the SSE even for local destinations

ILA keeps local traffic local and reduces latency
bit.ly/4r6yTDV

#MicrosoftEntra #GlobalSecureAccess #IntelligentLocalAccess #cloudcoffeeTech

Microsoft Entra Access Reviews: Governance for User and Guest Access - cloudcoffee.ch Microsoft Entra Access Reviews provide a structured way to regularly review user and guest access in Microsoft Entra ID.

🔐 Microsoft Entra Access Reviews
User and guest access often grow over time. This step-by-step guide shows how Microsoft Entra Access Reviews add structure, consistency, and auditability.

👉 bit.ly/4sCNHuU

#MicrosoftEntra #AccessReviews #IdentityGovernance #IAM #cloudcoffeeTech

Soft Delete in Microsoft Entra Conditional Access: Easily Restore Deleted Policies - cloudcoffee.ch Soft Delete in Microsoft Entra Conditional Access protects against accidental policy deletion and enables full restoration through the Entra Admin Center or PowerShell.

🔥 Soft Delete for Microsoft Entra Conditional Access

Deleted CA policies can be restored for 30 days – including conditions and assignments.
No more rebuilding from scratch.

Quick guide covers Portal + PowerShell/Graph.
👉 bit.ly/4aIXYzi

#MicrosoftEntra #ConditionalAccess #IAM #CloudSecurity

Microsoft Intune Multi Admin Approval: Securing Device Actions such as Wipe, Retire and Delete - cloudcoffee.ch Microsoft Intune Multi Admin Approval: How to secure device actions such as Wipe, Retire, and Delete – including a step-by-step guide.

🔐 Multi Admin Approval in Microsoft Intune now covers critical device actions like Wipe, Retire and Delete — adding a four-eyes check to high-impact operations.

Full step-by-step guide: bit.ly/4raUwDv

#MicrosoftIntune #EndpointSecurity #IntuneAdmins #cloudcoffeeTech

WatchTra: Automated Attribute Compliance for Microsoft Entra ID - cloudcoffee.ch WatchTra automates attribute compliance in Microsoft Entra ID, ensuring consistent identity data and improved governance across your organization.

Meet WatchTra — an open-source tool for Entra ID attribute compliance.

Automate checks, ensure data quality, and simplify governance.

🔗https://www.cloudcoffee.ch/microsoft-azure/watchtra-attribute-compliance-microsoft-entra-id/

#Azure #IAM #CloudSecurity #Automation #MicrosoftEntra

Disable Entra Connect Seamless SSO – Step-by-Step Guide - cloudcoffee.ch Disable Entra Connect Seamless SSO to reduce complexity, minimize security risks, and modernize authentication with Microsoft Entra.

🚫 Disable Entra Connect Seamless SSO

Seamless SSO is legacy — it adds admin overhead and increases the attack surface.

Here’s why and how to disable it safely 👇
bit.ly/47jsCfm

#MicrosoftEntra #SeamlessSSO #CloudSecurity #EntraConnect #IAM

Microsoft Defender for Endpoint: Getting Started with Deployment Using Intune - cloudcoffee.ch Deploy Microsoft Defender for Endpoint with Intune. Onboarding, EDR, Firewall, Antivirus, ASR, and Tamper Protection explained in simple steps.

🛡️ New blogpost: Microsoft Defender for Endpoint: Getting Started with Deployment Using Intune
Step-by-step guide on:
✅ Connecting Defender ↔ Intune
✅ Enabling EDR sensor
✅ Applying baseline policies
✅ Alerts & notifications
👉 bit.ly/3WkaE7h
#MicrosoftDefender #Intune #EndpointSecurity #M365

Protect Security Info Registration with Microsoft Entra Conditional Access and Microsoft Entra ID Protection - cloudcoffee.ch Risk-based protection for security info registration using Microsoft Entra Conditional Access and ID Protection.

🔐 Stop risky security info registrations in Microsoft Entra ID

With Conditional Access + ID Protection you can block registration under user or sign-in risk.

💡 Simple to configure – but delivers a big boost in security.

👉 bit.ly/4lVWhAE

#MicrosoftEntraID #ConditionalAccess #CyberSecurity

Microsoft Entra Connect: Migration to Application Based Authentication (ABA) - cloudcoffee.ch Migration to Application-Based Authentication (ABA)More security. Modern authentication. Practical insights.

🔐 Microsoft Entra Connect now supports Application Based Authentication (ABA)

This step-by-step guide covers the upgrade, app registration, and post-upgrade validation.

👉 www.cloudcoffee.ch/microsoft-az...

#MicrosoftEntra #EntraConnect #IAM

Microsoft Defender Attack Simulation Training: Boosting Real-World Security Awareness - cloudcoffee.ch Guide to Microsoft Attack Simulation Training: Simulate Phishing, Analyze User Behavior, and Strengthen Security Awareness.

🔐 New blog post: Simulate phishing attacks without risk 🔐

Microsoft Defender Attack Simulation Training helps boost measurable security awareness.

Read now: www.cloudcoffee.ch/microsoft-36...

#MicrosoftDefender #AttackSimulation #SecurityAwareness #Phishing #Microsoft365

Thanks for pointing that out — you're absolutely right to ask. I’ve rechecked and tested it again: the Admin Consent Workflow and Permission Classification do work with Entra ID Free.
I’ll update the blog post shortly to reflect that.
Really appreciate the heads-up!

Microsoft Entra ID: Admin Consent Workflow for Secure Application Permissions - cloudcoffee.ch Learn how the Admin Consent Workflow in Microsoft Entra ID secures application permissions and enables centralized access reviews.

🔐 Managing App Permissions in Microsoft Entra ID 🔐
The Admin Consent Workflow gives you control — no more blind user approvals.
✅ Reviewer-based approvals
✅ Permission classification
✅ No more permission sprawl

🌐 www.cloudcoffee.ch/microsoft-az...
#MicrosoftEntra #AdminConsent #IAM #CloudSecurity

cloudcoffee.ch cloudcoffee.ch

🔐 Securing Microsoft 365 Apps with Microsoft Entra Global Secure Access 🔐

Microsoft Entra Global Secure Access provides a powerful solution for securing access to Microsoft 365 services such as Exchange Online and SharePoint Online.

tinyurl.com/2z2htuz7

#Microsoft365 #GlobalSecureAccess #Entra

Enhancing Security with Microsoft Entra Protected Actions and Conditional Access - cloudcoffee.ch Learn step by step how Microsoft Entra Protected Actions enhance the security of sensitive processes through conditional access.

🔐 Enhancing Security with Microsoft Entra Protected Actions and Conditional Access 🔐

My latest blog post provides a step-by-step guide on how to secure high-impact administrative tasks in Microsoft Entra using Protected Actions.

www.cloudcoffee.ch/microsoft-az...

Microsoft Entra ID: QR Code Sign-In (Public Preview) - cloudcoffee.ch Set up sign in with QR code in Microsoft Entra ID - for fast, secure access without entering a password.

🚀 Microsoft Entra ID: QR Code Sign-In 🔐

The QR code sign-in feature in Microsoft Entra ID is now in Public Preview — no passwords required!

www.cloudcoffee.ch/microsoft-az...

#Microsoft #Azure #IdentitySecurity #Passwordless #CloudSecurity #QRCode #FrontlineWorkers #TechTips #ITSecurity

Microsoft Defender for Identity: Getting Started - cloudcoffee.ch Microsoft Defender for Identity: Setup, Requirements, Sensor Installation and Functionality Check – A Clear Guide for Getting Started.

🚀 Getting Started with Microsoft Defender for Identity! 🔍

Get all the details in my latest blog post: www.cloudcoffee.ch/microsoft-36...

#Microsoft #Azure #Microsoft365 #DefenderForIdentity #IdentityProtection #CyberSecurity #AzureSecurity #Infosec #ThreatDetection #ITSecurity #ZeroTrust