Hello Reader,

The next episode of the Microsoft Cloud IT Pro podcast has been released!

Most Microsoft Entra tenants have a blind spot, and it is not the accounts you are thinking about.

Non-human identities like service principals, managed identities, and app registrations often outnumber user accounts in enterprise environments, yet they receive a fraction of the governance attention. That is a problem, because attackers have noticed.

In Episode 423, Ben sat down live at Workplace Ninjas with Eric Woodruff, Chief Identity Architect at Semperis, and Chris Brumm, Cyber Security Architect at glueckkanja. Both are Microsoft MVPs in Security, and together they cover the full landscape of non-human identities in Microsoft Entra ID, from foundational concepts to active exploitation patterns to what is coming next with AI agent identities.

Here is what you will walk away with:

• A clear understanding of what service principals are and why they are a preferred attacker target
• Practical guidance on credential management and the risks of improper owner assignments
• Why managed identities should be your default approach wherever your architecture supports it
• What to watch out for in multi-tenant app configurations
• How to start thinking about AI agent identities before that surface area gets out of hand

Today's episode: https://www.msclouditpropodcast.com/episode423/​

Like what you hear and want to support the show? Check out our membership options.​

Show Notes

• ​Eric Woodruff on LinkedIn​
• ​Eric Woodruff on X (@ericanidentity)​
• ​Eric on Identity​
• ​Chris Brum on LinkedIn​
• ​Chris Brumm on X (@cbrhh)​
• ​Chris Brumm's Blog​
• ​Application and service principal objects in Microsoft Entra ID​
• ​Workload Identities​
• ​Securing service principals in Microsoft Entra ID​
• ​Securing managed identities in Microsoft Entra ID​
• ​Conditional Access for Workload Identities​
• ​Microsoft Entra Audit Logs​
• ​Microsoft Sentinel Detection Templates​

About the sponsors

TrustedTech is a leading Microsoft Cloud Solution Provider specializing in cloud services, perpetual licensing, and support for medium and enterprise businesses. Their U.S.-based team holds all 6 Microsoft Solutions Partner Designations. Learn more at TrustedTech.

Would you like to become the irreplaceable Microsoft 365 resource for your organization? Let us know!​

View today's episodehttps://www.msclouditpropodcast.com/episode423/​

​​​​​​