PS HarriJaakkonen :~/Posts> Get-AllPosts | Sort-Object Date -Descending | Format-List
PS> Find-Post
EU Sovereignty and Identity: Entra ID, External ID, and Keycloak Compared - Part 4

Part 4 of the EU data sovereignty series. Comparing Microsoft Entra ID, Entra External ID, and Keycloak (Red Hat SSO) through a sovereignty lens — isolation, customization, what you gain, and what you give up.

Read →
Security Copilot: Email Intelligence in Microsoft Defender

Security Copilot's Email Summary feature has hit public preview in Microsoft Defender — here's what it does, where it lives, and what else has shipped in 2025–2026.

Read →
The Six Levels of AI: From Machine Learning to Agentic Systems

From narrow ML models at the base to fully autonomous agentic systems at the top, the AI stack has six distinct levels. Here's what each one does and where you'll find it.

Read →
M365 Copilot Flex Routing: What EU Admins Need to Check This Week

Microsoft has enabled Copilot flex routing by default for EU tenants, allowing LLM inferencing outside the EU Data Boundary during peak demand. Here's what it means and how to disable it.

Read →
France Bets on Linux for 2.5 Million Devices: Bold Sovereignty Play or Costly Gamble?

France's Linux and digital sovereignty plan could affect up to 2.5 million civil servants. In Part 3 of the EU data sovereignty series, I look at whether this is smart policy or an expensive political statement.

Read →
Microsoft Entra Agent Registry: Consolidation into Microsoft Agent 365

Agent Registry is consolidating into Microsoft Agent 365. Here's what's changing, what stays the same, and why you should care about agent governance.

Read →
Microsoft Entra SCIM 2.0 APIs: Standards-Based Identity Provisioning at Scale

Explore Microsoft Entra SCIM 2.0 APIs for standards-based identity lifecycle management. Setup, licensing, use cases, and practical implementation guide.

Read →
Entra Tenant Governance: Securing Multi-Tenant Environments at Scale

Discover how Microsoft Entra Tenant Governance enables organizations to discover, govern, and secure multiple tenants at enterprise scale without custom scripts or fragmented models.

Read →
When AI Attacks AI: The McKinsey Lilli Hack and Agentic AI Security

An autonomous AI agent hacked McKinsey's Lilli platform in two hours, exposing 46 million messages and writable system prompts. Here's what it means for your agentic AI strategy and how Microsoft's security stack addresses the threat.

Read →
AI Administrator Role Gets Real Teeth — Managing Agents Without Global Admin

Microsoft has expanded the AI Administrator role in Entra and M365 admin center to cover full agent lifecycle management. What changed, what the new permission boundaries look like, and how this fits into the broader Entra Agent ID governance model.

Read →
Microsoft Security Copilot — How It Works, Custom Agents, and the OpenAPI Plugin Model

A detailed look at Microsoft Security Copilot — how the reasoning engine works, how to build custom agents, the OpenAPI plugin model, and what the M365 E5 inclusion from April 2026 means for your organization.

Read →
Microsoft Entra Backup and Recovery — Identity Resilience Done Right

Microsoft Entra Backup and Recovery is now in Public Preview. Automatic backups, difference reports, and point-in-time recovery for your Entra tenant — here's what it means and why it matters.

Read →
Keycloak vs Entra External ID: Part 2 - Container Deployment, User Management & Technical Depth

Deep technical comparison of Keycloak and Microsoft Entra External ID - Part 2 covers container deployments, user management requirements, advanced customization, and real-world technical scenarios.

Read →
Keycloak vs Entra External ID: Part 1 - Architecture, Customization & Technical Foundations

Deep technical comparison of Keycloak and Microsoft Entra External ID - Part 1 explores architecture, identity models, customization capabilities, and why control matters.

Read →
Your Conditional Access Policy Said "Everyone." It Didn't Mean It.

For years, Conditional Access policies targeting All resources silently skipped a class of sign-in entirely — no MFA, no compliance check, no controls. Attackers learned to use this lane. Microsoft just closed it. Here is the full technical story.

Read →
Future of Microsoft Entra External ID - Part 3

Explore the roadmap for Microsoft Entra External ID, best practices for implementation, and recommendations for organizations planning their CIAM strategy.

Read →
Migrating from Azure AD B2C to External ID - Part 2

Complete guide to migrating users from Azure AD B2C to Microsoft Entra External ID using Microsoft's official migration toolkit with bulk export, import, and JIT password migration.

Read →
Microsoft Entra External ID: The Future of Customer Identity - Part 1

Introduction to Microsoft Entra External ID, the successor to Azure AD B2C for customer-facing identity solutions. Learn what EEID offers, feature parity with B2C, and key limitations.

Read →
Microsoft Entra Agent ID: The Identity Layer Your AI Agents Need

Microsoft Entra Agent ID is in preview as of early 2026. Learn what it is, how agent identities differ from app and user identities, what security capabilities it brings, and what is coming around the corner.

Read →
Azure Key Vault: Using Secrets in App Service, Container Apps, AKS and Functions - Part 2

Master retrieving secrets from Azure Key Vault in Container Apps, App Services, AKS, and Function Apps. CLI-first guide with Key Vault references, secret injection, and zero-downtime rotation.

Read →