Page 166 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Microsoft Entra can require interactive acceptance through Conditional Access and report who accepted or declined, but the feature does not determine whether the document or process satisfies a legal obligation.
Read the explainer
Tenant Restrictions v2 can constrain access to external Microsoft Entra tenants, but authentication-plane and data-plane coverage varies by enforcement method, platform, browser, application, and resource.
Read the guide
Microsoft's authentication methods migration moves MFA and self-service password reset method control into one policy, with transitional states that require an exact before-and-after comparison.
Read the checklist
Microsoft Entra custom banned passwords are intended for organization-specific terms, not for importing a large breached-password corpus or replacing layered authentication controls.
Read the guide
Microsoft Entra smart lockout distinguishes some familiar and unfamiliar failures, but its thresholds, hybrid behavior, and user impact still need environment-specific validation.
Read the checklist
A Temporary Access Pass can bootstrap passwordless registration or recovery, but its scope, delivery, lifetime, use count, and follow-up evidence need the same care as any other powerful temporary credential.
Read the playbook
Microsoft Entra token protection binds supported sign-in session tokens to a device, but platform and application coverage is bounded and requires compatibility testing before enforcement.
Read the guide
Microsoft Entra ID Protection has workload-identity risk reports and remediation guidance, but workload identities cannot complete user MFA and the documented detection scope excludes some identity types.
Read the playbook
Cross-tenant synchronization can automate B2B user lifecycle between tenants, but the source tenant controls scope and attribute mapping while the target holds another representation of the person.
Read the guide
Entra external collaboration settings control who may invite guests, what directory information guests can see, and optional domain restrictions, but they do not govern every resource assignment or cross-tenant path.
Read the checklist