Reporting on group membership for Entra ID devices (including assigned licenses)

In this article we explore the methods available to report on group membership for device objects within Entra ID. One of the scenarios where this is important is for device-based licensing for Microsoft 365 Enterprise apps. As neither the Entra ID portal nor Microsoft 365 Admin Center do a good job at that, we instead leverage the Graph API and Graph SDK for PowerShell, and provide sample scripts for both. …

Continue readingReporting on group membership for Entra ID devices (including assigned licenses)

Creating a Conditional access policy with Authentication strength control programmatically

I’ve seen a few questions lately on how to programmatically create a Conditional Access policy with Authentication strength  as one of the “grant” controls. For some reason, the documentation doesn’t directly address this scenario, and in turn people seem to get confused, when in fact, it’s rather simple. So in this …

Continue readingCreating a Conditional access policy with Authentication strength control programmatically