Starting February 2026, Microsoft Authenticator will introduce jailbreak/root detection for work or school accounts. Microsoft states this change is intended to prevent work or school accounts in Authenticator from functioning on jailbroken or rooted devices.
Enhancing Azure role activation security with FIDO2/Passkeys
Configuring Entra Privileged Identity Management (PIM) with Conditional Access authentication context and Conditional Access authentication strength can significantly enhance your organization’s security posture. By requiring users to meet specific authentication requirements when activating roles in PIM, you can ensure that sensitive roles are only accessed under the most secure conditions.
Microsoft Entra ID CAP | Enforcing WHfB using Authentication Strength
Explore the depths of Office 365 security in our latest blog post as we guide you through the implementation of a conditional access policy requiring Windows Hello for Business authentication. This step-by-step tutorial covers the integration process, authentication strength configuration, and offers insights into expected error messages. Discover how to investigate and resolve issues efficiently, ensuring a seamless transition to this advanced security measure and fortifying your Office 365 environment against unauthorized access. Elevate your digital workspace security and empower users with this comprehensive guide.
Troubleshooting Error Code ‘0x000005e’ in WHfB: PIN Authentication Woes
Encountering error code ‘0x000005e’ during PIN-based authentication in Windows Hello for Business (WHfB) can be a roadblock for users. In this blog post, we’ll delve into a specific scenario where users face this issue immediately after the enrollment process in a cloud Kerberos trust scenario.
WHfB: Fixing Windows Hello for Business error ‘LogoncertTemplateReady: NO (StateNoTemplate)’
Greetings, readers. In this article, we will delve into the process of investigating and resolving the message “LogoncertTemplateReady: NO (StateNoTemplate)” that may surface during Windows Hello for Business (WHfB) Hybrid Certificate trust deployments.
Windows Services – Solving common issues that prevent Windows services from starting
Hello everyone. In this article, I will cover three common issues that prevent Windows services from starting. As an example, we’ll use the Print spooler service, but this could be applicable to any service under Windows Services.
AAD CAP – Enforcing passwordless sign-in with MS Authenticator to users using Conditional Access authentication strength
Hello everyone. In this article, I will cover the steps to enforce users to use passwordless sign-in with Microsoft Authenticator with Authentication Strength in Azure AD Conditional Access Policy.
WHfB Cloud Kerberos Trust – Fixing config issue: ‘Cloud trust for on-premise auth policy is enabled: No’
Hello everyone. In this article, I will cover one common issue when moving from WHfB Certificate trust to WHfB Cloud Kerberos Trust.
WHfB Cloud Kerberos Trust – Windows Hello for Business provisioning will not be launched.
Hello everyone. For the ones implementing Azure AD Cloud Kerberos Trust and the WHfB popup doesn’t show up, please check this article. Today, I will share a few interesting logs to investigate WHfB Cloud Kerberos Trust enrollment issues. Normally they are related to missing requirements.
AD FS – Fixing error message: None of the UPNs were successful for S4U Logon call
Hello everyone. Today, we’re going to investigate the error message ‘None of the UPNs were successful for S4U Logon call‘ on AD FS servers when users are trying to authenticate from extranet using a Web Application Proxy service.
