News

News Microsoft Bolstering Entra Cross-Tenant Access Settings Update coming in Q3 will remove a limit on the number of partner collaborations. By Kurt Mackie 08/31/2023 ...
Simons said Microsoft chose the name "Entra" because "it indicates an entry-way to new world of doing business." It's not meant to be a gate with restrictive access, he added.
According to a BeyondTrust discovery, Entra (formerly Azure Active Directory) grants intended yet risky capabilities to B2B guest users through Microsoft’s billing permissions.
“Microsoft Entra ID is a powerful identity platform, but support for non-Microsoft applications, legacy systems, and hybrid environments can be challenging,” said Rohan Pinto, CTO of 1Kosmos.
The vulnerability involves a cross-tenant authentication flaw affecting Entra ID integrations – attackers could execute full account takeover with just access to an Entra tenant and the victim's ...