Thomas Naunheim

Microsoft Entra just got a "Superpower" 🦸‍♂️ The March 2026 updates are here, and they are a game-changer for Identity Admins. I’m joined by MVPs @NathanMcNulty, @rucam365, and @Thomas_Live to go behind the scenes of: ✨ Native Backup & Recovery (The "Holy Grail" feature) ✨ Difference Reports (Version control for your tenant) ✨ Shadow Tenant Discovery (Finding what’s lurking in your org) From accidental deletions to "sneaky" background changes, we’re showing you how the pros use these new tools to stay in control. Catch the episode now 👇 #EntraChat #Microsoft #Identity #CloudAdmin #CyberResilience

EntraOps. personal research project to demonstrate capabilities for automated management of a Microsoft Entra ID tenant at scale using a DevOps approach, by @Thomas_Live github.com/Cloud-Architek…

@Thomas_Live @rucam365 @vanhybrid and I are launching a new #Entra podcast, and our first episode features the great @NathanMcNulty as a guest. Stay tune for the first episode dropping soon, coming from the #mvpsummit. #EntraID #mvpbuzz #Entratainment

In #EntraOps beta, Tenant Governance support is here 🎉 It now resolves all transitive group assignments across governing/managed tenants and applies the same privileged “Tiering” model you know. No more missing context in policy templates! github.com/Cloud-Architek…

🔐 New blog post: “B2B or Not 2B? Cross-Tenant Delegated Administration with #MicrosoftEntra #TenantGovernance” Microsoft brings the GDAP model for multitenant organization - one governing tenant, centralized role assignments. cloud-architekt.net/tenant-governa…

New to #EntraOps? It’s a community project that classifies privileged identities in Entra based on Enterprise Access Model across various RBACs - and feeds that data into a GitHub and Microsoft Sentinel for tracking, SOC integration and reporting. 👉 entraops.com

⚙️ Config & UX Improvements: Define Custom Security Attributes for Privileged Users, Workload Identities, and PAWs in config. All cmdlets now show progress bars and phase indicators. New LinkedIdentity filter in the Privileged EAM Overview Workbook.

🚀 EntraOps v0.6 - #AgentID Support, Advanced API Permission Classification & Performance Improvements I’ve been working on new features as well as overall improvements that offer a solid foundation for more exciting features coming in the next weeks. 🔗 github.com/Cloud-Architek…

Implement #MicrosoftExchange AD split permissions without losing functionality? I’ve found a way to achieve that and still gain the #ADSecurity benefits against compromise. Read details in the Blog or watch it on YouTube. glueckkanja.com/de/posts/2026-…

6 months ago, 4 Microsoft Security MVPs and I started building something. Last week, 120 people attended a 7-hour Entra Identity Masterclass at @ExpertsLiveDK . Nearly all of them stayed the entire time. Today, we're making the Masterclass Labs ❇️free❇️ on GitHub. On the latest Entra Chat podcast, @JanVidarElven, @pimjacobs89, @Thomas_Live, @KlaBiers and I break down exactly what's inside the lab: 🔹 Lab 1: Entra Inbound Provisioning: Connect an HR source and push users into your tenant 🔹 Lab 2: Lifecycle Workflows: Automate joiner, mover, and leaver processes with pre-hire, new hire, and post-onboarding flows 🔹 Lab 3: Privileged Accounts: Create and secure admin accounts with FIDO2 phishing-resistant authentication 🔹 Lab 4: Access Packages & Entitlement Management: Govern access requests end-to-end 🔹 Lab 5: Conditional Access & Security Monitoring: Protect identities and monitor exposure in Entra ID 🔹 Lab 6: Entra Agents: Explore AI-powered identity management All self-guided. All on GitHub. Fork it, contribute to it, learn from it. If you work with Microsoft Entra ID, this is for you. 🎧 Watch/listen to the full episode: entra.chat 👾 Join the community: discord.entra.news Huge thanks to @knudsenmortendk who came up with the brilliant idea for the Identity Masterclass and for putting together this amazing team of MVPs to build and deliver it! #MicrosoftEntra #EntraID #IdentitySecurity #MicrosoftSecurity #ZeroTrust #EntraChat #OpenSource

So much fun running a 7 hour masterclass on Entra at @ExpertsLiveDK with these awesome peeps @Thomas_Live, @pimjacobs89, @JanVidarElven and Kause. We had over 120 folks joining us for the dep dives and hands on labs. I'm trying to get the guys to open source the labs so everyone can try them out in their own tenants. This includes a deep dive into building an Agent from scratch using Agent ID. Hit like if you'll be interested in getting access to the labs... Many thanks to @knudsenmortendk for the brilliant idea and putting the band together.

Becoming workload identity wizard master class by @Thomas_Live and @ericonidentity in @HIPConf

[New blog post] Analyzing #MicrosoftEntra 🤖 Workload Identity Activity Through 🪙 Token-Based Hunting I’ve published a #KQL function to hunt activities by tokens from non-human identities and share some experimental queries and insights in this article. cloud-architekt.net/token-hunting-…

@mattywhi As far as I can see, there’s only the automatic match by strong identifier or the option to create manual links.

@Thomas_Live Is there a Graph method that can be called to link identity or does it need to be manually completed

[New blog post] Linking Privileged Accounts to Identities in #MicrosoftDefender: Benefits and Use Cases In this article, I cover the key benefits and integration scenarios - focusing on #MicrosoftEntra workforce and privileged accounts. cloud-architekt.net/linking-privil…

The #Maester tests for linked identities are now available in preview. Big thanks to @SamErde for the valuable feedback and review of this new check!

✨ Track Speakers: Identity ✨ ✨ Ever dreamt of being a tech superhero? Cape up and dive into the Microsoft Identity cosmos with us! 🚀 Get set for the geek fest of the year at Experts Live Denmark 2026 on 24+25th February 2026! 🔗 All aboard: eldk26.expertslive.dk 🤖💡 Rub elbows with tech titans like Christopher Brumm (@cbrhh?s=09) | Fabian Bader (@fabian_bader) | Eric Woodruff (@ericonidentity) | Thomas Naunheim (@thomas_live) | Jan Vidar Elven (@JanVidarElven) | Klaus Bierschenk | Merill Fernando (@merill) | Pim Jacobs. #ELDK26 #ExpertsLiveDK #Microsoft #Community #Security #Azure #AI #ModernWorkplace #Intune #DevOps #Automation #M365 #PowerPlatform #Data #Purview #Development #OpenAI #Copilot #AVD #W365 #Identity #Entra ELDK26 Organizers: Morten Knudsen (@knudsenmortendk) Martin Byskov (@ByzzByskov) Morten Leth Hedegaard (@morten_leth) Kent Agerlund (@agerlund)

🤖 #MicrosoftEntra #AgentID + 🔐 #EntraOps Working on an #EntraOps integration and report that gives a clear overview of all Agent Identity objects across #MicrosoftEntra - including privileged assignment classification on Enterprise Access Model, sponsors, and ownership details.