Knowledge Base
Find answers to common questions and learn more about our services
Documenting client identity architecture
## Overview
Single source of truth speeds incidents and audits.
## Diagram elements
- IdP (Entra/Okta/ADFS), sync paths, MFA methods, CA policy layer...
identity-access-management
msp
seed-library
Feb 29, 2024
Read more →
Service account password rotation SOP
## Overview
Shared service account passwords become tribal knowledge—rotate with automation and vault checkout.
## Standard
- Unique account per serv...
identity-access-management
msp
seed-library
Feb 28, 2024
Read more →
VPN integration with Entra authentication
## Overview
Modern VPN supports SAML/OAuth to Entra—avoid duplicate identity silos.
## Architecture choices
- Vendor app in Entra for **SAML SSO**.
-...
identity-access-management
msp
seed-library
Feb 27, 2024
Read more →
Windows Hello for Business pilot checklist
## Overview
WHfB replaces passwords with keys/tokens on device—great UX when PKI and Intune ready.
## Preconditions
- **Hybrid** or **Key trust** vs...
identity-access-management
msp
seed-library
Feb 26, 2024
Read more →
Risk-based policies and user impact
## Overview
Entra ID Protection risky sign-ins can block or require password change—tune to avoid helpdesk meltdown.
## Policy design
Start with **me...
identity-access-management
msp
seed-library
Feb 25, 2024
Read more →
Admin consent workflow for third-party apps
## Overview
Structured consent prevents shadow SaaS while keeping velocity for known vendors.
## Workflow
1. User submits **business justification**...
identity-access-management
msp
seed-library
Feb 24, 2024
Read more →
Group-based licensing assignment audit
## Overview
Dynamic groups + GBL automate licensing but hide drift when rules wrong.
## Audit quarterly
1. Compare **assigned** licenses vs **group m...
identity-access-management
msp
seed-library
Feb 23, 2024
Read more →
Directory sync errors: duplicate attributes
## Overview
Duplicate proxyAddresses or UPNs block object sync—users vanish from cloud groups.
## Detection
Sync error reports in **Entra** + event l...
identity-access-management
msp
seed-library
Feb 22, 2024
Read more →
Hybrid join vs AAD join troubleshooting
## Overview
Devices must land in the correct trust state for policies to apply.
## Hybrid join checks
- **dsregcmd /status** shows AzureAdJoined + Do...
identity-access-management
msp
seed-library
Feb 21, 2024
Read more →
Legacy auth blocking: phased approach
## Overview
Blocking basic auth reduces credential stuffing—but kills old mail clients if unprepared.
## Phase 0
Inventory **sign-ins using legacy pr...
identity-access-management
msp
seed-library
Feb 20, 2024
Read more →
OAuth consent policies for tenant hardening
## Overview
Malicious apps trick users into consent. Restrict consent to admins or verified publishers.
## Policies
- Disable user consent for risky...
identity-access-management
msp
seed-library
Feb 19, 2024
Read more →
App registration secrets rotation cadence
## Overview
Client secrets in app registrations are frequent breach pivots. Automate rotation reminders.
## Standard
- **Max 180-day** secret lifetim...
identity-access-management
msp
seed-library
Feb 18, 2024
Read more →