{"id":126797,"date":"2023-03-30T09:00:00","date_gmt":"2023-03-30T16:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=126797"},"modified":"2023-05-15T23:04:34","modified_gmt":"2023-05-16T06:04:34","slug":"latest-microsoft-entra-advancements-strengthen-identity-security","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/","title":{"rendered":"Latest Microsoft Entra advancements strengthen identity security"},"content":{"rendered":"\n

If you read behind the attention-grabbing headlines, most novel techniques rely on compromised identities.1<\/sup> In fact, of all the ways an attacker can get into your digital estate, identity compromise is still the most common.2<\/sup> This makes identity your first line of defense.<\/p>\n\n\n\n

In many organizations, however, too many identities not only lack fundamental protections, but also end up with too many access permissions that they keep for too long. Our new State of Cloud Permissions Risks Report<\/a> reveals some sobering statistics that drive home the importance of carefully protecting and managing your identities to reduce both risk and opportunities for cybercriminals.<\/p>\n\n\n\n

Across multicloud, more than half of all identities are admin and workload identities that have all access rights and all permissions to cloud resources. This is dangerous because overall, identities are using only 1 percent of the permissions granted to them. Some don\u2019t use their permissions at all. In fact, more than 60 percent of all identities with permissions to cloud resources are completely inactive. At 80 percent, the proportion of inactive workload identities is even higher\u2014and workload identities outnumber human identities 10 to 1.<\/p>\n\n\n\n

While this report summarizes issues with cloud permissions, we see similar issues for business users.<\/p>\n\n\n\n

At the recent Microsoft Secure event, I shared ways to strengthen your identity defenses<\/a> using the latest innovations we\u2019re delivering in Microsoft Entra<\/a>. These include new governance controls and real-time access protections to help you secure identities and the resources they access.<\/p>\n\n\n\n

A new, faster way to onboard with Microsoft Entra Identity Governance and Microsoft Entra Verified ID<\/h2>\n\n\n\n

Good identity practices start during onboarding, a process that often frustrates IT admins and users alike.<\/p>\n\n\n\n

The goal of onboarding is to give new users the right access to the right resources for the right amount of time\u2014adhering to the Zero Trust<\/a> principle of \u201cleast privilege access\u201d\u2014on day one. However, traditional onboarding still requires loads of redundant paperwork and online forms that require manual review and approval before new users can start work and get access to resources. This can delay hiring and increase ramp-up time.<\/p>\n\n\n\n

Eighty-two percent of organizations Microsoft surveyed want a better\u2014and less manual\u2014way to do identity verification, and now they have one.3<\/sup> Microsoft Entra Identity Governance and Microsoft Entra Verified ID now work together to simplify onboarding<\/a>. Instead of spending weeks collecting and verifying pre-hire documentation such as education and industry certifications, organizations can validate everything digitally using Verified ID credentials<\/a> issued by trusted authorities.<\/p>\n\n\n\n

When you use entitlement management in Identity Governance to create an access package with specific applications and expiration settings, you can now require a Verified ID as part of the approval workflow.4<\/sup> With entitlement management, you can make the onboarding process completely digital and self-serve\u2014no admin required.5<\/sup> New users get an automated welcome email with a link to the My Access portal. Once they share the required Verified ID and their manager approves their access request, they get all their workplace access permissions at once. When their permissions expire, they can easily prove their identity again using their Verified ID without going through a lengthy renewal process.<\/p>\n\n\n\n

This streamlined onboarding process is faster, safer, and less resource intensive. Organizations will spend less time validating credentials on paper and approving access requests manually, and more time collaborating and innovating. Plus, other Identity Governance<\/a> features, such as automation of routine joiner, leaver, and mover tasks, help keep permissions the right size over time.<\/p>\n\n\n\n

New protections to help secure access<\/h2>\n\n\n\n

Once a new user is on board, then Microsoft Entra helps you secure their access. This starts with proactive controls such as enforcing multifactor authentication.<\/p>\n\n\n\n

Strong sign-in defenses make you less attractive\u2014and less vulnerable\u2014to most attackers, who don\u2019t have the technical prowess, funding, or resources of more sophisticated groups. Credential attacks are the most common because they cost relatively little to perform, but you can interrupt them with multifactor authentication.6<\/sup> Our data shows that more than 99.9 percent of compromised accounts don\u2019t have multifactor authentication enabled.<\/p>\n\n\n\n

However, sophisticated attackers are trying to work around multifactor authentication with techniques such as SIM jacking and multifactor authentication fatigue attacks. To counter these techniques, Microsoft Entra supports phishing-resistant multifactor authentication methods. These include passwordless options such as Windows Hello for Business and FIDO2 security keys. Certificate-based authentication is also available for organizations standardized on it.<\/p>\n\n\n\n

When you enable multifactor authentication, by all means, adopt the strongest methods. Older methods, such as SMS and voice calls, are simply less secure.<\/p>\n\n\n\n

Phishing-resistant features in Microsoft Authenticator further strengthen your multifactor authentication defenses.7<\/sup> Number Matching requires users to enter a number displayed on the sign-in screen, making it harder to accidentally approve a request. To help users confirm that they\u2019re approving an access request they (and not an attacker) made, application context shows them which application they\u2019re signing into, while location context displays their sign-in location based on the IP address of their device.<\/p>\n\n\n\n

And now, with Conditional Access authentication strengths, admins can set policy on the strength of multifactor authentication required\u2014and base that policy on the sensitivity of the apps and resources a user is trying to access.8<\/sup> In tandem, we\u2019re extending phishing-resistant multifactor authentication to more scenarios. For example, you can require phishing-resistant multifactor authentication for Microsoft Azure virtual machines to protect remote sign-ins and to provide end-to-end coverage for dev, testing, and production environments. You can also require it for external users and for users who have to move between different Microsoft cloud instances to collaborate, for example, between government and commercial clouds.9<\/sup><\/p>\n\n\n\n

In addition, with Conditional Access for high-risk actions, you can now require phishing-resistant multifactor authentication for sensitive actions<\/em>, such as modifying access policies, and coming soon, adding a new credential to an application or changing federated trust configuration. You can also restrict high-risk actions based on device compliance or location.<\/p>\n\n\n\n

New countermeasures to help prevent lateral movement<\/h2>\n\n\n\n

Once a new user has signed in, Microsoft Entra helps you take a proactive \u201cassume breach\u201d stance to protect their credentials and prevent lateral movement. This is essential because post-authentication attacks, such as token theft through malware, mining poorly configured logs, and compromising routing infrastructure, are on the rise.10<\/sup><\/p>\n\n\n\n

Attackers replay stolen tokens to impersonate an authenticated user. Just as thieves copy a credit card number or read its RFID code and then go on a shopping spree until the bank notices and freezes the card, attackers steal tokens to access your digital resources\u2014and cause a lot of damage\u2014until that token expires.<\/p>\n\n\n\n

Two new capabilities in Microsoft Entra are closing the token replay window.<\/p>\n\n\n\n

First, strict enforcement of location policies lets resource providers use continuous access evaluation (CAE) to immediately revoke tokens that run afoul of location policies. Until now, a stolen token could stay valid for an hour or more, even if an attacker tried to replay it outside of the location range that policy allows.<\/p>\n\n\n\n

Exchange Online, SharePoint, and Microsoft Graph can now respond to network change events by revoking tokens in near real-time. Since CAE is part of the Microsoft identity platform, hundreds of apps have adopted it to benefit from the enforcement of location policies and other CAE events. This includes Microsoft 365 apps such as Outlook, Microsoft Teams, and OneDrive, as well as the built-in Mail app on Mac, iPhone, and iPads<\/a>. Third-party apps can adopt CAE through Microsoft Services Authentication Library.11<\/sup><\/p>\n\n\n\n

While closing the token replay window is a big step forward, we\u2019re also working to make sure it never opens in the first place through a new capability called Token Protection.12<\/sup> This adds a cryptographic key to issued tokens that blocks attackers from replaying them on a different device, which is like having a credit card that instantly deactivates if someone steals it from your wallet.<\/p>\n\n\n\n

As a first step, we\u2019re adding this capability for sign-in sessions on Windows (version 10 or later). Next, we\u2019ll extend this capability to other platforms and address more Windows scenarios, such as app sessions and workload cookies.<\/p>\n\n\n\n

A new dashboard to help close policy gaps<\/h2>\n\n\n\n

The new identity protections described above are just part of what\u2019s available for creating granular Conditional Access policies. To help you find vulnerable areas in your environment, we\u2019re adding an overview dashboard to the Microsoft Azure Active Directory Conditional Access blade that summarizes your policy posture, identifies unprotected users and apps, provides insights and recommendations on Conditional Access coverage based on sign-in activity, and helps you investigate the impact of individual policies. This will help you more quickly identify where you need to better enforce Zero Trust principles, so you can strengthen your defenses.<\/p>\n\n\n\n

Good permissions governance and protecting against identity compromise are essential strategies for keeping your people and resources safe.<\/p>\n\n\n\n

Learn more<\/h2>\n\n\n\n

Learn more about Microsoft Entra<\/a>.<\/p>\n\n\n\n

To learn more about the new governance and identity protection capabilities described in this blog post, check out these Microsoft Secure sessions<\/a>. To review all the new innovations announced at Microsoft Secure, read Vasu Jakkal\u2019s blog post<\/a>.<\/p>\n\n\n\n

To learn more about Microsoft Security solutions, visit our website<\/a>. Bookmark the Security blog<\/a> to keep up with our expert coverage on security matters. Also, follow us on LinkedIn (Microsoft Security<\/a>) and Twitter (@MSFTSecurity<\/a>) for the latest news and updates on cybersecurity.<\/p>\n\n\n\n

<\/div>\n\n\n\n
\n\n\n\n

1<\/sup>2023 identity security trends and solutions from Microsoft<\/a>, Alex Weinert. January 26, 2023.<\/p>\n\n\n\n

2<\/sup>Verizon 2022 Data Breach Investigations Report<\/a>. 2022.<\/p>\n\n\n\n

3<\/sup>Microsoft survey of 3,000 United States-based companies with more than 500 users. 2021.<\/p>\n\n\n\n

4<\/sup>Add a Verified ID requirement (Preview)<\/a>, Microsoft Learn. January 24, 2023.<\/p>\n\n\n\n

5<\/sup>What is entitlement management<\/a>? Microsoft Learn. March 9, 2023. <\/p>\n\n\n\n

6<\/sup>Navigating the ever-evolving authentication landscape<\/a>, Pamela Dingle. January 10, 2023. <\/p>\n\n\n\n

7<\/sup>Defend your users from MFA fatigue attacks<\/a>, Alex Weinert. September 28, 2022. <\/p>\n\n\n\n

8<\/sup>Conditional Access authentication strength<\/a>, Microsoft Learn. January 29, 2023.<\/p>\n\n\n\n

9<\/sup>Configure Microsoft cloud settings for B2B collaboration<\/a>, Microsoft Learn. March 9, 2023. <\/p>\n\n\n\n

10<\/sup>Token tactics: How to prevent, detect, and respond to cloud token theft<\/a>, Microsoft Security Experts and Microsoft Incident Response. November 16, 2022. <\/p>\n\n\n\n

11<\/sup>How to use Continuous Access Evaluation enabled APIs in your applications<\/a>, Microsoft Learn. March 2, 2023. <\/p>\n\n\n\n

12<\/sup>Conditional Access: Token protection<\/a>, Microsoft Learn. March 8, 2023. <\/p>\n","protected":false},"excerpt":{"rendered":"

Good permissions governance and protecting against identity compromise are essential strategies for keeping your people and resources safe. Learn how the new features in Microsoft Entra can support your identity strategy. <\/p>\n","protected":false},"author":162,"featured_media":126879,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ep_exclude_from_search":false,"_classifai_error":"","footnotes":""},"content-type":[3662],"topic":[3673,3689],"products":[3702,3705],"threat-intelligence":[],"tags":[3824],"coauthors":[2093],"class_list":["post-126797","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","content-type-news","topic-identity-and-access-management","topic-zero-trust","products-microsoft-entra","products-microsoft-entra-verified-id","tag-hybrid-work"],"yoast_head":"\nNew Microsoft Entra features strengthen identity security | Microsoft Security Blog<\/title>\n<meta name=\"description\" content=\"Learn how Microsoft Entra can support your identity strategy with new governance controls and real-time access protections.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New Microsoft Entra features strengthen identity security | Microsoft Security Blog\" \/>\n<meta property=\"og:description\" content=\"Learn how Microsoft Entra can support your identity strategy with new governance controls and real-time access protections.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-30T16:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-16T06:04:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"533\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Joy Chik\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Joy Chik\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/\"},\"author\":[{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/joy-chik\/\",\"@type\":\"Person\",\"@name\":\"Joy Chik\"}],\"headline\":\"Latest Microsoft Entra advancements strengthen identity security\",\"datePublished\":\"2023-03-30T16:00:00+00:00\",\"dateModified\":\"2023-05-16T06:04:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/\"},\"wordCount\":1676,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg\",\"keywords\":[\"Hybrid work\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/\",\"name\":\"New Microsoft Entra features strengthen identity security | Microsoft Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg\",\"datePublished\":\"2023-03-30T16:00:00+00:00\",\"dateModified\":\"2023-05-16T06:04:34+00:00\",\"description\":\"Learn how Microsoft Entra can support your identity strategy with new governance controls and real-time access protections.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg\",\"width\":800,\"height\":533,\"caption\":\"Seller completing multi-factor authentication via facial recognition on a mobile phone before working from home.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Latest Microsoft Entra advancements strengthen identity security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"name\":\"Microsoft Security Blog\",\"description\":\"Expert coverage of cybersecurity topics\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\",\"name\":\"Microsoft Security Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Security Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New Microsoft Entra features strengthen identity security | Microsoft Security Blog","description":"Learn how Microsoft Entra can support your identity strategy with new governance controls and real-time access protections.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/","og_locale":"en_US","og_type":"article","og_title":"New Microsoft Entra features strengthen identity security | Microsoft Security Blog","og_description":"Learn how Microsoft Entra can support your identity strategy with new governance controls and real-time access protections.","og_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/","og_site_name":"Microsoft Security Blog","article_published_time":"2023-03-30T16:00:00+00:00","article_modified_time":"2023-05-16T06:04:34+00:00","og_image":[{"width":800,"height":533,"url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg","type":"image\/jpeg"}],"author":"Joy Chik","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg","twitter_misc":{"Written by":"Joy Chik","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/"},"author":[{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/joy-chik\/","@type":"Person","@name":"Joy Chik"}],"headline":"Latest Microsoft Entra advancements strengthen identity security","datePublished":"2023-03-30T16:00:00+00:00","dateModified":"2023-05-16T06:04:34+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/"},"wordCount":1676,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg","keywords":["Hybrid work"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/","name":"New Microsoft Entra features strengthen identity security | Microsoft Security Blog","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg","datePublished":"2023-03-30T16:00:00+00:00","dateModified":"2023-05-16T06:04:34+00:00","description":"Learn how Microsoft Entra can support your identity strategy with new governance controls and real-time access protections.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2023\/03\/CLO22_RemoteHome_049-1-1.jpg","width":800,"height":533,"caption":"Seller completing multi-factor authentication via facial recognition on a mobile phone before working from home."},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2023\/03\/30\/latest-microsoft-entra-advancements-strengthen-identity-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/"},{"@type":"ListItem","position":2,"name":"Latest Microsoft Entra advancements strengthen identity security"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","name":"Microsoft Security Blog","description":"Expert coverage of cybersecurity topics","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization","name":"Microsoft Security Blog","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","width":512,"height":512,"caption":"Microsoft Security Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/"}}]}},"msxcm_display_generated_audio":false,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Security Blog","distributor_original_site_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/126797"}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/users\/162"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/comments?post=126797"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/126797\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media\/126879"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media?parent=126797"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/content-type?post=126797"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/topic?post=126797"},{"taxonomy":"products","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/products?post=126797"},{"taxonomy":"threat-intelligence","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/threat-intelligence?post=126797"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/tags?post=126797"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/coauthors?post=126797"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}