Cloud Identity

Learn about cloud identity management, authentication models, and identity federation in hybrid and cloud environments.

Diagram showing Microsoft Entra Kerberos authentication flow with Windows 11 device, Entra ID cloud KDC, Cloud TGT, OnPremTgt, and Active Directory domain controller
Cloud Identity Identity & Access Management Microsoft Entra

Microsoft Entra Kerberos Deep Dive: The Missing Link for Cloud-Native Windows 11 (Entra Join + Intune + Passwordless)

Table of Contents The Cloud-Native Endpoint Problem Kerberos Created What Microsoft Entra Kerberos Actually Is (and Isn’t) Architecture: Entra ID as a Cloud KDC Ticket Types Explained: Cloud TGT vs OnPremTgt (Partial/Referral) End-to-End Flows (Cloud Resource vs On-Prem Resource) Why This Unlocks Entra Joined Windows 11 at Scale Windows Hello for Business Cloud Kerberos Trust […]

Cloud Identity Cloud Security Defensive Engineering (SOC / Blue Team) Microsoft Entra Security

Azure AD / Microsoft Entra Conditional Access “Bypass” via Phantom Device Registration & PRT Abuse — A Deep Technical Breakdown

Time to read: 10–12 minutes (technical deep dive) Conditional Access (CA) in Microsoft Entra ID (formerly Azure AD) is often treated as the enforcement point for MFA, compliant-device requirements, location rules, and risk-based policies.Recent red-team research shows how an attacker can still reach protected resources without touching a corporate endpoint by abusing the device trust

Cloud Identity Enterprise Security Microsoft Intune PKI & Certificates

Microsoft Intune Cloud PKI: A Deep Technical Dive into Architecture, Security, and Deployment

Estimated Reading Time: 18–20 minutes Public Key Infrastructure (PKI) has always been a necessary evil in enterprise IT—powerful, security‑critical, and operationally complex. With the introduction of Microsoft Intune Cloud PKI, Microsoft is transforming traditional PKI into a fully cloud‑native, managed service tightly integrated with endpoint management and identity. This article provides a deep technical exploration

Scroll to Top
×