How to restrict Device Code Flow in Entra ID
Check out this article via web browser: How to restrict Device Code Flow in Entra ID
For good reasons, device code flow in Entra ID is getting a lot of attention. Attackers heavily use it to get access to Microsoft 365 accounts and data. Device code phishing is very effective, as phishing-resistant MFA, like passkeys, are not helping here. The victim will simply hand over an access token to the attacker.…
The post How to restrict Device Code Flow in Entra ID appeared first on JanBakker.tech.
Published on:
Learn moreWe can help you with How to restrict Device Code Flow in Entra ID
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Finally a smooth(er) passkey onboarding experience in Microsoft 365!
Check out this article via web browser: Finally a smooth(er) passkey onboarding experience in Microsoft 365! Microsoft is doing a lot to enhan...
How to create a Microsoft 365 device-bound passkey on macOS
Check out this article via web browser: How to create a Microsoft 365 device-bound passkey on macOS I did a discovery today, and I want to sha...
How to add granular amr claims to your SAML apps in Entra ID
Check out this article via web browser: How to add granular amr claims to your SAML apps in Entra ID In my last post, I covered how Entra...
Lock or sign-out when Yubikey is removed from the device
Check out this article via web browser: Lock or sign-out when Yubikey is removed from the device I didn’t know there was already a solut...
Writing Maester tests using AI – From idea to Pull Request
Check out this article via web browser: Writing Maester tests using AI – From idea to Pull Request I love Maester. No doubt about that. ...
Admin control for SSO prompts in Windows; finally, an off switch!
Check out this article via web browser: Admin control for SSO prompts in Windows; finally, an off switch! If you’ve been paying attentio...
Passkeys by default and retirement of Microsoft-provided SMS and voice authentication – A guide to stay calm
Check out this article via web browser: Passkeys by default and retirement of Microsoft-provided SMS and voice authentication – A guide ...
KB – employeeLeaveDateTime show empty (null)
Check out this article via web browser: KB – employeeLeaveDateTime show empty (null) This is a knowledge base item. I hope it will help ...
Why Windows is the hardest passkey surface in 2026 and what Entra admins should expect
Check out this article via web browser: Why Windows is the hardest passkey surface in 2026 and what Entra admins should expect Written by: Cor...
Entra ID SAML authnmethodsreferences (AMR) now supports phishing-resistant MFA
Check out this article via web browser: Entra ID SAML authnmethodsreferences (AMR) now supports phishing-resistant MFA If you’ve been fo...