Skip to content
← All topics

Security & Identity

8articles

Identity is where most solutions quietly break. Notes on SSO and authentication flows, Microsoft Graph permissions, least-privilege design, and the security trade-offs that show up once something real hits production.

  • SSO, authentication, and token flows
  • Microsoft Graph scopes and least-privilege permissions
  • Securing agents, apps, and endpoints by default

Articles about Security & Identity

Newest first

  1. 9 min readPower Platform

    Power Apps Code Apps: Your Code, Power Platform's Guardrails

    Code apps let you build a React or Vue app in your own IDE and run it on Power Platform, with Entra ID sign-in, 1,400+ connectors, and DLP handled for you.

  2. 11 min readCopilot Studio

    Finding GitHub Copilot Harness Agents Before PPAC Shows Them

    The Power Platform admin center still doesn't flag which Copilot Studio agents run on the GitHub Copilot harness. The isCLIAgent property does, and Microsoft has now published governance guidance built on it.

  3. 14 min readMicrosoft Foundry

    Publish Foundry Agents to Teams Behind a Private Endpoint

    Disabling public network access removes the Foundry portal's Teams publish button. Here's the REST path that replaces it and the inbound design you now own.

  4. 23 min readCopilot Studio

    Add ServiceNow to Copilot Studio with User Login SSO (So ServiceNow Permissions Are Respected)

    Connect ServiceNow to Copilot Studio with Microsoft Entra ID User Login so requests honor each user's roles, ACLs, and audit trail.

  5. 12 min readVibe Coding

    Vibe Code Your Blog, Part 2: Build It, Then Ship It to Azure

    Deploy an Astro blog to Azure Static Web Apps with OIDC, least-privilege access, and a walkthrough of the resources and trade-offs.

  6. 5 min readCopilot Studio

    The Copilot Studio Auth Trap: Turning On SSO Changes Your Client

    Turning on authentication breaks the Copilot Studio SDK with EnvironmentSettingViolation. Here's why Direct Line and a server-side token exchange are the fix.

  7. 6 min readIntune

    The Intune Permission Trap: Your Graph Scope Is Only Half the Story

    A field report on diagnosing an Intune Graph 403 after granting DeviceManagementManagedDevices.Read.All, with instrumentation patterns for missing access.

  8. 19 min readAzure

    Portal of Portals: One Console for Every Admin Portal

    A tour of Portal 360°: multi-tenant admin, config drift, CVE tracking, and the BFF-secured Next.js architecture behind one Microsoft cloud console.

Explore related topics