Entra ID

Understand Microsoft Entra ID (formerly Azure AD), hybrid identity, and the evolving cloud identity landscape.

6 Topics0/6 complete

Entra ID Fundamentals

Microsoft Entra ID is the cloud identity platform that extends -- and increasingly replaces -- on-premises Active Directory, managing authentication for Azure, Microsoft 365, and thousands of SaaS applications.

Beginner

Hybrid Identity & Azure AD Connect

Azure AD Connect bridges on-premises AD and Entra ID, synchronizing identities across both worlds -- but each sync method introduces a unique attack surface that adversaries are eager to exploit.

IntermediateT1078.004

Conditional Access Policies

Conditional Access is the policy engine at the heart of Entra ID security -- it evaluates every sign-in against a set of conditions and decides whether to allow, block, or require additional verification.

Intermediate

Privileged Identity Management (PIM)

Entra PIM eliminates standing privileged access by requiring just-in-time role activation with approval workflows, MFA, and time limits -- so no one is a permanent Global Admin.

Intermediate

Entra ID Security Hardening

Entra ID ships with permissive defaults that attackers love -- Security Defaults, MFA enforcement, legacy auth blocking, and restrictive consent policies transform a vulnerable tenant into a hardened one.

Intermediate

Golden SAML & Federation Attacks

By stealing the ADFS token-signing certificate, attackers forge SAML tokens to impersonate any user in Entra ID -- the technique behind the SolarWinds/APT29 attack that compromised major government agencies.

AdvancedT1606.002