You Can’t MFA an AI Agent
MFA was built on something you have, know and are. AI agents have, know and are none of it, yet they act with your identity. Here’s why that breaks authentication.
You Can’t MFA an AI Agent Read More »
Architecture & Cloud Strategy
Enterprise labs, design patterns
The Agent Identity Toolbox: Stop Your AI Agents Signing In as You
AI agents don’t need to borrow your credentials. Entra Agent ID, SPIFFE and five open-source Microsoft projects give agents their own identity. Here’s the toolbox.
The Agent Identity Toolbox: Stop Your AI Agents Signing In as You Read More »
The Approval Reflex: When Your Agent Triggers Your MFA
We spent a decade teaching users never to approve a prompt they didn’t start. AI agents make unprompted prompts routine. Here’s the attack vector nobody sees coming.
The Approval Reflex: When Your Agent Triggers Your MFA Read More »
Your Ticket Volume Is a Defect List, Not Demand
Most service desks are measured on how fast they close tickets and never on how few arrive. Here is the loop that keeps the queue full, and the diagnostic that shows which half of it should not exist.
Your Ticket Volume Is a Defect List, Not Demand Read More »
Joiners, Movers and Leavers: Why Movers Break Your Permission Model
Every organisation has a joiners, movers and leavers process. Almost none of them run all three legs. The joiner leg gets done well, because somebody is standing in reception on Monday morning unable to work, and that failure is loud, immediate and embarrassing. The leaver leg gets done adequately, because HR chases it, because there
Joiners, Movers and Leavers: Why Movers Break Your Permission Model Read More »
Agent Access and the Permissions You Forgot You Granted
Every competent person running a Microsoft estate already knows the permissions are wrong. They do not need a tool to tell them that. Ask anyone who has administered SharePoint for more than a couple of years whether there is content in the tenant reachable by people who have no business reaching it, and you will
Agent Access and the Permissions You Forgot You Granted Read More »
Azure Just Put Your Old VMs on the Clock: How to Find Out If You’re Affected (Before 31 July)
Azure dropped an email in my inbox this morning. It waves a comfortable 2028 retirement date at you, so most people will archive it and move on. The part that could actually bite lands next week. From 31 July 2026, a large chunk of the estate people are quietly running can no longer scale or
Azure Subscription vs Resource Group: A Decision Guide (2026)
When should you create a new Azure subscription versus a new resource group – and why “more subscriptions” stopped being a bad idea. A cloud architect’s decision guide, with the history of what changed.
Azure Subscription vs Resource Group: A Decision Guide (2026) Read More »
Which Azure Landing Zone Do You Need? A Scoping Guide (2026)
“Landing zone” means four different things in Azure – from a single subscription to a full enterprise platform. A cloud architect explains the spectrum and how to scope the one you actually need.
Which Azure Landing Zone Do You Need? A Scoping Guide (2026) Read More »
Identity Is the New Castle Walls: Machine Identity, Zero Trust, and How to Learn It in a Homelab
The network perimeter dissolved and identity replaced it. Why machine identity now outnumbers humans, what the Cloud Adoption Framework says about who governs it, and how to learn every principle in a homelab for free.