Entra.Chat
by Merill Fernando
Latest episode
Entra Multi-Tenant App Mistakes Every SaaS Builder and Admin Should…
Entra Multi-Tenant App Mistakes Every SaaS Builder and Admin Should…
About this podcast
Entra Chat is a weekly podcast hosted by Merill Fernando and delivers practical insights for Microsoft administrators and security professionals through conversations with identity experts who've been in the trenches.
Episodes feature seasoned Entra practitioners sharing real-world deployment experiences and Microsoft Entra team members who build the features you use daily.
Get the inside track on best practices, implementation strategies, and upcoming capabilities directly from those who design and deploy Microsoft identity solutions.
Join us for actionable takeaways you can apply immediately in your Microsoft 365, Azure, and Entra environments.
---
Entra.Chat, its content and opinions are my (Merill Fernando) own and do not reflect the views of my employer (Microsoft). All postings are provided “AS IS” with no warranties and is not supported by the author. All trademarks and copyrights belong to their owners and are used for identification only.
entra.news
Episodes
The newest 20 of 83 episodes
- Entra Multi-Tenant App Mistakes Every SaaS Builder and Admin Should Know, with Kelvin Tegelaar · 43 min · Episode 83Most SaaS vendors connect to your tenant with one multitenant app and one credential, shared by every customer. Kelvin Tegelaar, founder of CyberDrain and creator of CIPP (used…
- Conditional Access Gaps and the App Back Door, with Brandon Colley · 39 min · Episode 79Most Conditional Access gaps aren’t exotic. They come from reading policies the wrong way: as firewall rules with an “allow”, as a list of platforms that seems complete, as an…
- Stop the Bleeding: Cleaning Up Apps, Secrets and Consent in Microsoft Entra · 51 minMost tenants have the same problem: hundreds of app registrations and service principals, client secrets that were set to expire in a hundred years, permission grants nobody…
- Stolen Tokens, Agents and Universal CAE: What Global Secure Access Adds to Entra ID · 50 min · Episode 77A phished and stolen refresh token is one of the most useful things an attacker can take from your tenant. It is a long-term artifact, which is why so many phishing attempts go…
- Your AI Coding Agent Is Creating Secrets You Don’t Know About · 34 min · Episode 76Ask a coding agent to build something that talks to another service and watch what it does. It creates a client secret. Then another one. As Arturo Lucatero puts it, next thing…
- Active Directory Security Testing in Maester 2.2 · 37 min · Episode 75Active Directory is not dead. It is nearly thirty years old, Microsoft is still shipping new capabilities and new telemetry for it, and most of the forests running today will…
- Microsoft Security Architect: Active Directory Is 10x Harder to Defend Than Entra · 59 min · Episode 74At Black Hat USA 2026, Microsoft’s David Weston put three numbers on a slide that anyone still running domain controllers should sit with. The Microsoft Security Response Center…
- How General Motors Moved 200,000 People to Passkeys · 44 min · Episode 73Microsoft starts making passkeys the default in Microsoft Entra ID on 1 September 2026, and retires Microsoft-provided SMS and voice MFA on 1 February 2027. Every organisation…
- Microsoft Entra memberOf Retirement: What Admins Must Do · 43 min · Episode 72On 3 November 2026, the memberOf operator in Microsoft Entra dynamic membership groups stops working. Nothing errors. Nothing breaks loudly. Every dynamic group, dynamic…
- Pass-the-Passkey: What Michael Grafnetter's Black Hat Research Means for Entra Admins · 36 min · Episode 71Passkeys are phishing-resistant. But that resistance is enforced by your browser, which binds every authentication to the origin that requested it. Skip the browser, and the…
- From SMS MFA to Passkeys: A Practical Microsoft Entra Migration Plan · 53 min · Episode 70Microsoft-managed SMS and voice MFA will stop working on February 1, 2027. That deadline makes passkey planning urgent, but enabling a new authentication method is only the first…
- The Ultimate Microsoft Entra Global Secure Access Migration Guide · 49 min · Episode 69An Entra GSA migration should not mean throwing away years of useful SSE policy work and rebuilding every application, segment, and rule by hand. Existing configuration carries…
- Why Entra Admins Need Microsoft Purview Now · 54 min · Season 68Conditional Access no longer begins and ends with identity signals. Microsoft Purview can now influence the controls Entra administrators are asked to implement. From…
- How Xbox Secures 70+ Entra Tenants Every Night with Maester · 47 min · Season 67Xbox Security runs a gaming-specific Microsoft Entra baseline across more than 70 tenants every night. The scale is striking: about 50 controls, dozens of independently operated…
- One Compromised Agent ID Blueprint Can Cross Tenant Boundaries · 54 min · Episode 66Microsoft Entra Agent ID uses familiar application and service-principal objects under the hood, but its one-to-many hierarchy creates a different security boundary. A blueprint…
- Attackers Are Targeting The AI Ecosystem You Cannot See · 44 min · Episode 65AI agent security is not just about attackers using AI. It is also about attackers targeting the agent ecosystem most organizations cannot see clearly yet: MCP servers, agent…
- From Windows Core to Leading Agent ID: Vince Smith’s Microsoft Story · 47 min · Episode 64Folks, every big thing in identity started as somebody’s late-night side quest and Vince Smith has been in the room for a lot of them. In this episode of Entra Chat, Vince (the…
- Shadow Admins: The Non-Human Identities Hiding in Your Entra Tenant · 1 h 8 minNot every admin in your tenant is a person. Service principals, app registrations, and the new wave of agent identities can quietly hold permissions powerful enough to own your…
- How Microsoft Is Securing AI Agents in Entra - Conditional Access, Zero Trust & the "Block" Debate · 44 min · Episode 62AI agents can make decisions and act faster than any human — which means your old identity security playbook no longer holds. In this episode of Entra Chat, [host name] sits down…
- The Learn-It-All Career Playbook for Identity and Security Pros · 35 min · Episode 61In this episode of Entra Chat, we sit down with Christina Morillo, the Senior Director of Information Security for the New York Football Giants, to explore her inspiring…
