Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
À partir d’avant-hierFlux principal

Microsoft Entra ID fixes Conditional Access policy bypass, will enforce MFA sign-in for OIDC-only requests

Par : IT Experts
30 janvier 2026 à 14:43
Grant or block access to resource in Conditional Access (image Microsoft)
Microsoft will improve how Conditional Access policies are enforced in Microsoft Entra ID starting March 27, 2026. This change addresses a security loophole in which policies targeting all resources with specific exclusions could be bypassed in certain authentication scenarios. The rollout continues through June 2026 and forms part of Microsoft's Secure Future Initiative. Because these sign-ins will no longer bypass Conditional Access, users may now be required to complete MFA, meet device compliance requirements, or satisfy other configured Conditional Access controls, such as approved apps, app protection policies, or authentication strength, before accessing the resource.

Source

Specops Secure Access: Multi-factor authentication (MFA) for Remote Desktop Protocol (RDP), and VPN connections in Active Directory

Par : IT Experts
28 janvier 2026 à 14:35
Specops Secure Access supports multiple authentication methods for multi-factor authentication (MFA)
Specops Secure Access is a multi-factor authentication solution that adds a second authentication layer to Windows logon, Remote Desktop Protocol (RDP), and VPN connections in Active Directory environments. It is designed for on-premises or hybrid Active Directory environments and extends MFA to critical Windows access points without replacing Active Directory as the identity store. The solution addresses the growing vulnerability of password-based authentication and helps organizations fulfill compliance requirements for modern cybersecurity standards. It can also help organizations meet cybersecurity insurance requirements by strengthening access controls.

Source

Microsoft Entra ID auto-enables passkey profiles in March 2026

Par : IT Experts
28 janvier 2026 à 14:24
Configure passkey settings (image Microsoft)
Starting March 2026, Microsoft Entra ID will introduce passkey profiles and synced passkeys to general availability, enabling group-based authentication configurations with granular control over device-bound and synced passkeys. Microsoft will automatically enable passkey profiles for tenants that don't opt in during the initial rollout, with existing settings preserved to maintain their current security posture.

Source

Microsoft 365 admin center will block accounts without MFA in February

Par : IT Experts
14 janvier 2026 à 12:32
Microsoft 365 admin center will block accounts without  MFA in February
Microsoft will enforce multi-factor authentication (MFA) for all users signing in to the Microsoft 365 admin center starting February 9, 2026. This critical security measure aims to prevent unauthorized access to administrative accounts that manage tenant configurations, user provisioning, and compliance settings.

Source

Syncing passkeys with Microsoft Entra ID

Par : IT Experts
31 décembre 2025 à 14:15
Microsoft Entra ID introduces synced passkeys to simplify multi-factor authentication and reduce the security risks associated with traditional methods such as passwords and SMS codes. This feature, announced at Microsoft Ignite 2025, enables users to authenticate with biometrics or device PINs without entering passwords when syncing credentials across devices via cloud-based passkey providers. The implementation also includes high-assurance account recovery using government-issued ID verification to restore access when users lose all authentication methods.

Source

Self-service password reset with SMS in Microsoft Entra External ID

Par : IT Experts
15 décembre 2025 à 14:27
Microsoft Entra External ID now supports SMS-based verification for self-service password reset (SSPR), providing external users an additional recovery method beyond email one-time passcodes. The feature entered public preview in September 2025 and includes built-in fraud protection through integration with Microsoft's Phone Reputation platform.

Source

Windows 11 password icon missing from lock screen sign-in options

Par : IT Experts
3 décembre 2025 à 12:11
A known bug in Windows 11 causes the password icon to become invisible or missing from the lock screen sign-in options after installing specific Windows updates released since August 2025. Although the button remains functionally available, it is not visible to users, requiring them to hover over a blank space to access the password field.

Source

1Password simplifie enfin le déverrouillage de vos mots de passe

13 novembre 2025 à 10:51

1Password a annoncé le 12 novembre 2025 une amélioration majeure : le gestionnaire de mots de passe peut désormais s’ouvrir automatiquement dès que vous déverrouillez votre appareil, que ce soit via Face ID, Touch ID, un code PIN ou un mot de passe.

Windows Hello Passkey Manager Plugin API

Par : IT Experts
12 novembre 2025 à 13:14
Microsoft announced the passkey plugin API for Windows 11 in October 2024, with the feature becoming generally available with the November 2025 security update. This API enables third-party passkey managers, such as 1Password and Bitwarden, to integrate directly into Windows 11's native authentication system, allowing end-users to authenticate with a passkey on multiple devices.

Source

❌
❌