May 10, 2026
Microsoft Entra ID for Architects: Beyond the Defaults
Conditional access, PIM, and workload identities — the configurations I deploy in regulated environments.
Microsoft Entra IDIdentityCloud Security
Microsoft Entra ID is the new control plane. Default tenants ship with sensible baselines, but regulated enterprises (banking, energy, healthcare) need a hardened blueprint.
In this post I walk through the exact conditional-access matrix, PIM scopes and workload-identity patterns I deploy when leading cloud-security engagements with Fortune 500 clients.