9 min read
Power Apps Code Apps: Your Code, Power Platform's Guardrails
Code apps let you build a React or Vue app in your own IDE and run it on Power Platform, with Entra ID sign-in, 1,400+ connectors, and DLP handled for you.
#Security
8posts
11 min read
Finding GitHub Copilot Harness Agents Before PPAC Shows Them
The Power Platform admin center still doesn't flag which Copilot Studio agents run on the GitHub Copilot harness. The isCLIAgent property does, and Microsoft has now published governance guidance built on it.
14 min read
Publish Foundry Agents to Teams Behind a Private Endpoint
Disabling public network access removes the Foundry portal's Teams publish button. Here's the REST path that replaces it and the inbound design you now own.
23 min read
Add ServiceNow to Copilot Studio with User Login SSO (So ServiceNow Permissions Are Respected)
Connect ServiceNow to Copilot Studio with Microsoft Entra ID User Login so requests honor each user's roles, ACLs, and audit trail.
12 min read
Vibe Code Your Blog, Part 2: Build It, Then Ship It to Azure
Deploy an Astro blog to Azure Static Web Apps with OIDC, least-privilege access, and a walkthrough of the resources and trade-offs.
5 min read
The Copilot Studio Auth Trap: Turning On SSO Changes Your Client
Turning on authentication breaks the Copilot Studio SDK with EnvironmentSettingViolation. Here's why Direct Line and a server-side token exchange are the fix.
6 min read
The Intune Permission Trap: Your Graph Scope Is Only Half the Story
A field report on diagnosing an Intune Graph 403 after granting DeviceManagementManagedDevices.Read.All, with instrumentation patterns for missing access.
19 min read
Portal of Portals: One Console for Every Admin Portal
A tour of Portal 360°: multi-tenant admin, config drift, CVE tracking, and the BFF-secured Next.js architecture behind one Microsoft cloud console.