Modern Management Summit 2025

Join this deep-dive session to explore the latest developments in passwordless authentication with Passkeys in Microsoft Entra ID. Through practical demonstrations and real-world scenarios, discover how Passkeys are revolutionizing authentication while learning essential implementation strategies and avoiding common pitfalls. This session combines technical expertise with field experience to provide you with actionable insights for successful Passkey adoption.

Manage Intune from anywhere? Today we can secure the identity with conditional access, FIDO2 and MFA. But what about the actual device the administration is done from?

Learn how to setup a privileged access workstation using Intune and Windows 365.
During this session we are going through how to make sure that You have a secure way for high privileged administrators to do the work.

If you don't feel you are 100% in control with your identities, this session is for you so you can regain control!

Join us for an in-depth session on mastering identity control using Entra ID. This session will guide you through essential steps such as tagging user classifications and authentication methods, establishing over 55 targeted conditional access policies, learning about authentication strengths and methods and leveraging reporting tools to manage non-compliant identities.

We will also discuss the importance of challenging existing processes and establishing new ones to enhance security and efficiency.

Key Topics:
(1) User Classification and Authentication Methods:
• Learn how to effectively tag users based on classification.
• Explore various authentication methods and their implementation.

(2) Conditional Access Policies:
• Establish and configure over 55 conditional access policies tailored to your organization’s needs.
• Target specific user groups and scenarios to ensure robust security measures.

(3) Reporting and Compliance:
• Gain control over non-compliant identities by utilizing reporting tools.
• Monitor key metrics such as last logon, authentication methods, MFA status, and identity license compliance.

(4) Process Evaluation and Improvement:
• Discuss the necessity of challenging existing processes.
• Explore the establishment of new processes to align with modern security requirements.

(5) Managing Conditional Access Policies:
• Utilize scripts to manage and automate conditional access policies.
• Roll out policies using pilot groups to ensure smooth implementation and minimal disruption.

Is MFA sufficient to safeguard your organization in 2025?

In this session, we will delve into the latest trends in password strategies, authentication methods, identity protection, privileged identity management, conditional access, and the journey towards a password-less and phishing resistant future.

Join this session to gain insights into different authentication methods in Entra ID, how to secure and govern privileged access, and how to embark on the path to becoming passwordless.

Are you tired of users flooding your inbox with requests to reset passwords, join groups, or access apps? It's time to empower them! In this session, we’ll reveal all the self-service features in Entra ID (formerly Azure AD) that put the power back where it belongs: right into your users' hands.

Get ready to dive into the world of Entra ID self-service features, where we explore how you can empower (end)users to manage their apps, groups, settings, devices, and access like true IT superheroes.

Jan will cover Entra ID's free and premium self-service offerings and show how both you and your end users can get things done with minimal effort.

Less IT intervention means more user autonomy. Who said self-service couldn’t be fun?

Gain insights from real-life experiences on how to craft an effective privileged access strategy that supports "Just Enough, Just In Time" access while maintaining control and avoiding potential security breaches.

Explore the various use-cases, potential pitfalls, and limitations inherent in implementing privileged access using the Microsoft Enterprise Access Model, tailored to scale across multi-cloud environments and on-premise Active Directory setups.

Discover how to manage delegations to IT personnel and end-users using Entra Privileged Identity Management. This session will showcase specific examples of privileged access designs for platforms like Power BI, Azure Landing Zones, Intune, and more.

Still using legacy Active Directory, but would like to get PIM for AD, then come to this session to see it - based on PIM for Entra ID combined with AD TTL group membership.

By the session's conclusion, you'll also have learned about various useful (and free) community add-ons developed by the speaker, including tools like PIM Assignment Revoker, PIM Assignment Wizard, PIM Assignment Exporter, and PIM Baseline Automation.

Join us for an electrifying live session where our expert hosts will demonstrate a real-time hack into a Microsoft 365 tenant using a well-known phishing attack technique. Ever wondered how hackers sidestep MFA and manage to sneakily extract data? This session is your golden ticket to those answers!

**What you will learn from this session:

- **The Hacker's Playbook:** Understand the tactics attackers use to target your digital environment.

- **Your Shield Against Phishing:** Learn how to thwart 99% of phishing attempts with practical, effective strategies.

- **Emergency Protocols:** Find out the best steps to take when dealing with unauthorised access in your environment. This session promises to be both fun and interactive, empowering you with the knowledge to fortify your Microsoft 365 tenant against intruders. Get ready to engage with our friendly experts in real-time, ask questions, and gain invaluable insights into safeguarding M365!

We have been talking about Tiering in Active Directory, but when it comes to the cloud, what are the steps needed to be taken in order to achieve administrative Tiering there?

We will cover the basics of Tiering as a whole, with a deeper look into how we can apply a Tiering model on our cloud infrastructure, to make sure that a Threat Actor or Illicit Admin cannot gain more permissions throughout the infrastructure than is required.