You Can’t MFA an AI Agent
MFA was built on something you have, know and are. AI agents have, know and are none of it, yet they act with your identity. Here’s why that breaks authentication.
You Can’t MFA an AI Agent Read More »
Enterprise Skills
How real estates are run: access, identity, process and architecture. The rung above the ticket.
The Agent Identity Toolbox: Stop Your AI Agents Signing In as You
AI agents don’t need to borrow your credentials. Entra Agent ID, SPIFFE and five open-source Microsoft projects give agents their own identity. Here’s the toolbox.
The Agent Identity Toolbox: Stop Your AI Agents Signing In as You Read More »
The Approval Reflex: When Your Agent Triggers Your MFA
We spent a decade teaching users never to approve a prompt they didn’t start. AI agents make unprompted prompts routine. Here’s the attack vector nobody sees coming.
The Approval Reflex: When Your Agent Triggers Your MFA Read More »
Your Ticket Volume Is a Defect List, Not Demand
Most service desks are measured on how fast they close tickets and never on how few arrive. Here is the loop that keeps the queue full, and the diagnostic that shows which half of it should not exist.
Your Ticket Volume Is a Defect List, Not Demand Read More »
Least Privilege in Practice: Standing Access, Scope and Just-in-Time
Everybody in IT can define least privilege. Give every identity the minimum access needed to do its job, and no more. It appears in every security policy, every framework, and every interview answer. Almost nobody implements it properly. That is not because the principle is hard to understand. It is because the principle is free
Least Privilege in Practice: Standing Access, Scope and Just-in-Time Read More »
The Permissions Work to Do Before You Deploy Microsoft 365 Copilot
This is the practical page. If you want the argument about why this work is never finished, that is a separate piece. This one is just the list, ordered by risk rather than by product area, so you can work through it. It is deliberately short. There are longer guides than this and most of
The Permissions Work to Do Before You Deploy Microsoft 365 Copilot Read More »
Joiners, Movers and Leavers: Why Movers Break Your Permission Model
Every organisation has a joiners, movers and leavers process. Almost none of them run all three legs. The joiner leg gets done well, because somebody is standing in reception on Monday morning unable to work, and that failure is loud, immediate and embarrassing. The leaver leg gets done adequately, because HR chases it, because there
Joiners, Movers and Leavers: Why Movers Break Your Permission Model Read More »