The challenge

Legacy authentication, standing admin rights and inconsistent MFA left the tenant exposed to credential-based attacks.

What I delivered

• Blocked legacy authentication and designed a Conditional Access policy framework
• Rolled out phishing-resistant MFA and passkeys for privileged users
• Implemented Privileged Identity Management for just-in-time admin access
• Introduced access reviews and entitlement management for guests and groups
• Integrated device compliance from Intune into access decisions

Outcome

A Zero Trust identity baseline that stops the most common attacks and satisfies auditors.

Technologies

Microsoft Entra ID · Conditional Access · PIM · Access Reviews · Intune

Planning something similar? Book a discovery call →