Blog

What’s Changing?

Microsoft is now enabling enforcement mode by default.
This means the Kerberosis shifting toward stronger, modern encryption whether environments are ready or not.

New Default Behavior:

Kerberos will now use AES-SHA1 (0x18) only as the default encryption.
Any accounts...

Lifecycle Workflows in Microsoft Entra ID Governance are powerful—but they are also fundamentally trigger-driven.

Workflows are typically initiated by:

• Attribute changes
• Dates relative to employeeStartDate and employeeLeaveDateTime
• Changes in group membership

This works well for simple...