<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Entra ID on Heilt ærleg</title><link>https://knutdimmen.no/en/tags/entra-id/</link><description>Recent content in Entra ID on Heilt ærleg</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Sun, 04 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://knutdimmen.no/en/tags/entra-id/index.xml" rel="self" type="application/rss+xml"/><item><title>Did you know you can define security based on risk?</title><link>https://knutdimmen.no/en/posts/security-defaults-conditional-access-risiko/</link><pubDate>Sun, 04 Oct 2026 00:00:00 +0000</pubDate><guid>https://knutdimmen.no/en/posts/security-defaults-conditional-access-risiko/</guid><description>&lt;p>Imagine that someone gains access to the email account of the person responsible for finance in your organization. They can read conversations with suppliers, see which invoices are expected, and send messages from an address colleagues trust. For a small business, the consequences can be serious, even with only a handful of employees.&lt;/p>
&lt;p>When you ask how you are protected against this, the answer might be: “Everyone has registered MFA.” That is a good starting point. But it only tells you that employees have set up a way to verify their identity. It does not tell you which requirements actually apply when someone tries to access their email.&lt;/p></description></item><item><title>You revoked the session. But did you check if the attacker registered their own device?</title><link>https://knutdimmen.no/en/posts/du-tilbakekalla-sesjonen-men-sjekka-du-om-angriparen-registrerte-si-eiga-eining/</link><pubDate>Sat, 26 Sep 2026 00:00:00 +0000</pubDate><guid>https://knutdimmen.no/en/posts/du-tilbakekalla-sesjonen-men-sjekka-du-om-angriparen-registrerte-si-eiga-eining/</guid><description>&lt;p>One of the things I brought home from Workplace Ninja Summit in Baden was how much the device actually matters to the identity.&lt;/p>
&lt;p>We talk a lot about MFA, passkeys, Conditional Access, and tokens. But the device isn’t just something the user sits in front of when they sign in.&lt;/p>
&lt;p>The device can itself become part of the trust chain.&lt;/p>
&lt;p>That point was clear across sessions on modern identity attacks, device trust, passkeys, and privileged workstations. Shortly after the conference, concrete attacks made the issue far less theoretical.&lt;/p></description></item><item><title>Business Premium doesn’t make you secure until you actually put it to use</title><link>https://knutdimmen.no/en/posts/microsoft-business-premium-er-flaggskip-i-business-segmentet-1-300-lisenser-og-m/</link><pubDate>Tue, 15 Sep 2026 00:00:00 +0000</pubDate><guid>https://knutdimmen.no/en/posts/microsoft-business-premium-er-flaggskip-i-business-segmentet-1-300-lisenser-og-m/</guid><description>&lt;p>Microsoft 365 Business Premium is the flagship in the business segment for organizations with up to 300 users, and the license includes much of what a Norwegian mid-sized organization actually needs in 2026: identity, device management, email protection, and endpoint protection. But that does not mean the organization is secure when the license is purchased. It only means the organization can set up much better protection than before.&lt;/p>
&lt;a href="https://learn.microsoft.com/microsoft-365/business-premium/microsoft-365-business-faqs?view=o365-worldwide#general" class="link-card" target="_blank" rel="noopener noreferrer" style="display:flex;align-items:center;gap:14px;padding:14px 16px;margin-bottom:10px;border:1px solid var(--border);border-radius:10px;text-decoration:none;color:inherit;">
&lt;img src="https://www.google.com/s2/favicons?sz=64&amp;amp;domain=learn.microsoft.com" alt="" class="link-card-icon" loading="lazy" decoding="async" style="display:block;width:36px;height:36px;max-width:36px;max-height:36px;object-fit:contain;flex:0 0 36px;border-radius:8px;">
&lt;div class="link-card-content" style="display:flex;flex-direction:column;gap:2px;min-width:0;flex:1;">
&lt;div class="link-card-title">Microsoft 365 Business Premium frequently asked questions&lt;/div>
&lt;div class="link-card-desc" style="white-space:normal;overflow-wrap:anywhere;">Microsoft’s overview of target audience, 300-user limit, and product positioning for Business Premium.&lt;/div>
&lt;/div>
&lt;/a>
&lt;a href="https://learn.microsoft.com/microsoft-365/admin/security-and-compliance/m365b-security-overview?view=o365-worldwide#areas-of-security-in-microsoft-365-for-business" class="link-card" target="_blank" rel="noopener noreferrer" style="display:flex;align-items:center;gap:14px;padding:14px 16px;margin-bottom:10px;border:1px solid var(--border);border-radius:10px;text-decoration:none;color:inherit;">
&lt;img src="https://www.google.com/s2/favicons?sz=64&amp;amp;domain=learn.microsoft.com" alt="" class="link-card-icon" loading="lazy" decoding="async" style="display:block;width:36px;height:36px;max-width:36px;max-height:36px;object-fit:contain;flex:0 0 36px;border-radius:8px;">
&lt;div class="link-card-content" style="display:flex;flex-direction:column;gap:2px;min-width:0;flex:1;">
&lt;div class="link-card-title">Microsoft 365 for business security overview&lt;/div>
&lt;div class="link-card-desc" style="white-space:normal;overflow-wrap:anywhere;">Microsoft’s overview of the security areas in Microsoft 365 for Business.&lt;/div>
&lt;/div>
&lt;/a>
&lt;p>The most important point is simple: &lt;strong>Business Premium is a licensing bundle, not a pre-secured operating state!&lt;/strong>&lt;/p></description></item></channel></rss>