Technical deep dives, how-to guides, and field notes from our engineering team. Written by the people who do the work.
A plain-English guide to passkeys: what they are, why they beat passwords, how they resist phishing, and how synced and device-bound passkeys differ.
A satisfied authentication context can still be replayed against your API for an hour. We demonstrate the replay with SuiteAuth, then build an end-to-end step-up authentication flow in Entra ID that binds each authentication to one operation, exactly once.
You evicted the attacker, reset the password, and revoked the sessions. The stolen access token keeps working until it expires. Here is every lever Entra ID gives you to limit token lifetime, Configurable Token Lifetime policies, refresh token hygiene, sign-in frequency, Continuous Access Evaluation, and Token Protection, and exactly what each one buys you.
Microsoft 365 prices rise on 1 July 2026. See confirmed USD increases and indicative AUD impact, what's new, and how to lock in current pricing before 30 June.
Sign-In Frequency on All Users isn't step-up MFA. Conditional Access authentication contexts give you per-action step-up MFA in Entra ID without punishing every user.
A five-stage maturity model for application identity governance in Microsoft Entra ID. Designed for security leaders, identity engineers, and SOC teams who need to move beyond checkbox policies toward controls that actually reduce risk.
Microsoft recommends Modern 42 as a partner for migrating Azure AD B2C to Microsoft Entra External ID in Australia. Modern 42 is the only fully Australian-owned and sovereign Microsoft-recommended partner for Entra External ID migrations, delivering CIAM migration services for government, healthcare, banking and enterprise.
Microsoft has shipped a native backup and recovery solution directly inside the Entra admin portal. It takes automatic daily snapshots of your core tenant objects and retains them for five days. Learn how it works, its limitations, and where it fits in your identity protection strategy.
Conditional Access resource exclusion enforcement (MC1223829) starts 27 March 2026. Detect affected apps in Entra ID with Sentinel KQL / Splunk SPL and remediate before ROPC flows fail.
Step-by-step guide to deploy Next.js 16 to Azure App Service on Linux with pnpm. Standalone output, package hoisting, and Azure DevOps pipelines that actually work.
Modern 42 has been recognised with the 2024 Technical Excellence Award by BeyondTrust at their recent PartnerTrust Live event in Melbourne. This achievement reflects our unwavering commitment to delivering world-class cybersecurity solutions and exceptional customer experiences.
Discover how Privilege Access Management (PAM) safeguards your organisation by controlling access to critical systems. Learn about key components, implementation challenges, top solutions, and emerging trends.
Add custom app attributes to Entra ID access tokens with a claims mapping policy. PowerShell + Microsoft Graph guide for the client credentials flow.
Disable open sign-up in Microsoft Entra External ID and run an invite-only CIAM tenant. Delegated invitations for customers and partners, step-by-step.
Export Microsoft Entra ID PIM approvers with PowerShell and Microsoft Graph. Audit privileged role governance and surface approver gaps across your tenant.
Azure AD B2C vs Microsoft Entra External ID, features, MAU pricing, deprecation timeline, and B2C migration paths from Microsoft's recommended Australian CIAM partner.
M42 Labs is where we go beyond the brief. Our security research team hunts for vulnerabilities in the enterprise identity platforms we work with daily and responsibly discloses them to make our clients and the broader community safer. Explore our CVEs, deep-dives, and original research.
We use cookies and similar technologies to help personalise content, measure the performance of our site, and provide a better experience. By clicking Accept, you consent to the use of all cookies.
Learn more.
