Ep. 2 - Detect and Defeat CA Bypasses

Are your Microsoft Conditional Access policies as secure as you think, or have they been turned into Swiss cheese? Following our premier episode on passkeys and tenant governance, Episode 2 of the Identity Roundtable dives straight into the weeds of identity red teaming. We are joined by Fabian Bader, a Cybersecurity Architect at glueckkanja and Microsoft Security MVP, to explore his research into Microsoft Entra and Conditional Access bypasses. Fabian reveals the surprising, behind-the-scenes token flows and undocumented API behaviors that allow attackers to quietly slip past your defenses - often using the very exclusions and documentation Microsoft provides.