Skip to content

Ulysses Neves

Microsoft Entra ID, authentication, and hybrid identity troubleshooting.

Menu
  • Home
  • Microsoft Azure
  • Microsoft AD FS
  • Microsoft 365
  • Contact
  • Troubleshooting Index
Menu

Category: Microsoft Entra Conditional Access

Conditional Access report-only: why a successful sign-in can show a policy failure

Posted on October 9, 2026

A screenshot-led lab: Alex reaches SharePoint while a report-only Block policy records Failure. Jamie provides the out-of-scope comparison.

Enhancing Azure role activation security with FIDO2/Passkeys

Posted on September 23, 2024

Configuring Entra Privileged Identity Management (PIM) with Conditional Access authentication context and Conditional Access authentication strength can significantly enhance your organization’s security posture. By requiring users to meet specific authentication requirements when activating roles in PIM, you can ensure that sensitive roles are only accessed under the most secure conditions.

Microsoft Entra ID CAP | Enforcing WHfB using Authentication Strength

Posted on April 21, 2024

Explore Microsoft 365 security as we guide you through implementing a Conditional Access policy that requires Windows Hello for Business authentication. This step-by-step tutorial covers the integration process, authentication strength configuration, and offers insights into expected error messages. Discover how to investigate and resolve issues efficiently, ensuring a seamless transition to this advanced security measure and strengthening your Microsoft 365 environment against unauthorized access. Elevate your digital workspace security and empower users with this comprehensive guide.

Microsoft Entra Conditional Access – Enforcing passwordless sign-in with Microsoft Authenticator using authentication strengths

Posted on July 28, 2023

Hello everyone. In this article, I will cover the steps to enforce users to use passwordless sign-in with Microsoft Authenticator with Authentication Strength in Microsoft Entra Conditional Access policy.

Microsoft Entra ID – Fixing the Download devices feature with a ‘failed’ error message

Posted on February 1, 2022

Hello guys. Today I will share some guidance on troubleshooting and fixing the immediate failure once you are trying to use the feature ‘Download devices (Preview)’ in AAD and receive immediately an error message without many details on it.

Microsoft Entra ID – Controlling Unknown Devices Using Conditional Access Policy in Microsoft Entra ID

Posted on July 14, 2020

Hello everyone. When configuring a conditional access policy based on platform (operating system), it can happen that the administrator doesn’t account for operating systems that aren’t listed in the policy — for example, unsupported platforms, or cases where client applications don’t send device information during authentication. The result is that this access isn’t controlled by the Azure policy.

Microsoft Entra ID – How to limit access to Outlook Web Access data using a CA policy

Posted on June 22, 2020

Hello everyone. Today I’ll present a step-by-step guide on how to integrate Conditional Access policies with Exchange Online policies to limit access to OWA. With the rise of mobility and the growing concern organizations have about protecting information stored on mobile devices, administrators face the difficult task of protecting the information that users can access.

Microsoft Entra Conditional Access Policy – Controlling browsing sessions using Conditional Access policies

Posted on April 17, 2020

Hi everyone. In today’s article, we’ll introduce the browser session management option available in Microsoft Entra Conditional Access policy.

Microsoft Entra Conditional Access – Configuring Microsoft 365 using a Conditional Access policy

Posted on March 10, 2020

Hello, everyone. In today’s article, we’ll explain what the Office 365 (Preview) application group is and how to use this new feature to control access to Office 365 resources in Azure using a conditional access policy. This configuration is typically used when the administrator wants to block all Office 365 applications except access to email.

Microsoft Entra ID – Controlling Access to Azure Through Terms of Use

Posted on February 11, 2020

Hello, everyone. In today’s article, we’ll explain how to force device registration in Azure using terms of use. This control applies to scenarios where administrators want to identify the devices used by users to access applications hosted in Azure.

Posts pagination

1 2 Next

Recent Posts

  • Conditional Access report-only: why a successful sign-in can show a policy failure October 9, 2026
  • Microsoft Entra SMS and Voice Retirement: An Admin Preparation Checklist September 24, 2026
  • Microsoft Defender for Identity domain investigation: six questions to ask first September 10, 2026
  • Microsoft Entra Kerberos key rotation: what changes—and what administrators should check September 6, 2026
  • Microsoft Authenticator Will Block Jailbroken Devices in 2026 — What You Need to Know March 17, 2026

Archives

  • October 2026
  • September 2026
  • March 2026
  • September 2024
  • April 2024
  • February 2024
  • December 2023
  • September 2023
  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
  • October 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022
  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • May 2020
  • April 2020
  • March 2020
  • February 2020
  • January 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019

Tags

#aaddownleveldevice #adfs #adfscertificate #adfscertificates #adfsmfaadapter #azureauth #azureCA #azuredevice #capolicy #cloudsummit2021 #conditionalaccess #conditionalaccesspolicy #deviceregistration #farmbehavior #gopasswordless #mfaserver #msidentity #namedlocation #securingazure #securingazuread #sslprivatekey #troubleshootingadfs #troubleshootingwaptrust #tshootadfs #waptrust #webapplicationproxy #WHFBcerttrust #whfbdeployment #WHfBhybridsetup #WHfBprovisioning #widdatabase adconnect AD FS authenticationstrength az500 azurepim Azure security cloudsecurity microsoft365 Microsoft Azure Microsoft Entra hybrid join Microsoft Entra ID Microsoft Entra MFA PowerShell WHfB
©2026 Ulysses Neves | Design: Newspaperly WordPress Theme
Ulysses Neves
Gerenciar Consentimento de Cookies
Para fornecer as melhores experiências, usamos tecnologias como cookies para armazenar e/ou acessar informações do dispositivo. O consentimento para essas tecnologias nos permitirá processar dados como comportamento de navegação ou IDs exclusivos neste site. Não consentir ou retirar o consentimento pode afetar negativamente certos recursos e funções.
Funcional Always active
O armazenamento ou acesso técnico é estritamente necessário para a finalidade legítima de permitir a utilização de um serviço específico explicitamente solicitado pelo assinante ou utilizador, ou com a finalidade exclusiva de efetuar a transmissão de uma comunicação através de uma rede de comunicações eletrónicas.
Preferências
O armazenamento ou acesso técnico é necessário para o propósito legítimo de armazenar preferências que não são solicitadas pelo assinante ou usuário.
Estatísticas
O armazenamento ou acesso técnico que é usado exclusivamente para fins estatísticos. O armazenamento técnico ou acesso que é usado exclusivamente para fins estatísticos anônimos. Sem uma intimação, conformidade voluntária por parte de seu provedor de serviços de Internet ou registros adicionais de terceiros, as informações armazenadas ou recuperadas apenas para esse fim geralmente não podem ser usadas para identificá-lo.
Marketing
O armazenamento ou acesso técnico é necessário para criar perfis de usuário para enviar publicidade ou para rastrear o usuário em um site ou em vários sites para fins de marketing semelhantes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
Ver preferências
  • {title}
  • {title}
  • {title}