Identity and Zero Trust
Identity is your organisation's new perimeter. I set up Microsoft Entra ID so that only the right people, on the right devices, can reach the right data, without making work needlessly difficult.
When is this for you?
- Your Conditional Access policies have grown over the years and nobody has the overview
- Administrators have permanent high privileges
- You want to go passwordless or move to phishing-resistant MFA
- You work with guest accounts or a hybrid environment with Active Directory
My approach
Inventory
Roles, administrators, apps, guest accounts and sign-in logs: who does what, and where are the risks?
Design
A Conditional Access framework based on personas (employees, admins, guests, service accounts), with emergency accounts and a consistent naming convention.
Test in report-only
New policies first run in report-only mode, so you see the impact before anyone is blocked.
Enable and monitor
Switch on step by step, with Identity Protection for risky sign-ins and users.
Operations and reviews
PIM for admin roles, access reviews for guests and groups, and documentation for every policy.
What you get
- A documented set of Conditional Access policies
- Privileged Identity Management for admin roles
- An approach for MFA or passwordless sign-in
- Emergency accounts and operating procedures
- Advice on hybrid identity with Entra Connect
My experience
I've been configuring Conditional Access, MFA, self-service password reset, PIM and Identity Protection for years, and I design access models (RBAC) for Azure. I'm certified as an Identity and Access Administrator (SC-300).
Shall we talk?
Would you like a website, or help with your cloud environment? Send me a message.