Per-Torben Sørensen
per-torben.sorensen.ws
Per-Torben Sørensen
@per-torben.sorensen.ws
🏢 Technical architect @ Crayon
🤓 25+ years in IT
✏️ Blog: agderinthe.cloud
❤️ Entra ID, identity security, PowerShell
📢 MFA! MFA! MFA! MFA!
Entra Access Packeages can quickly run wild, but luckily @irean.delusional.nu knows how to tame it. And now you can learn it as well.
I’ve shared a new blog post about how I approach auditing Entra ID Access Packages with PowerShell and Microsoft Graph.

It’s based on real migration work — cleaning up old dynamic groups and manual assignments before moving to Entra ID Governance.

Read it here: agderinthe.cloud/2025/11/12/a...
Auditing Entra ID Access Packages with PowerShell
When you start working seriously with Entra ID Governance, you quickly realize how powerful it can be. Lifecycle Workflows, Access Packages, and Access Reviews — all the building blocks are there t…
agderinthe.cloud
November 12, 2025 at 7:54 AM
👨‍🏫 Ready to move from “why” to “how” on geo filters in Entra Conditional Access?
🌍 I break down a practical, Zero Trust-friendly approach: block-by-default, named locations, and scoped exceptions for Scandinavian travelers.
#Entra #ZeroTrust agderinthe.cloud/2025/11/12/d...
Diving into geo filter with Entra Conditional Access – Part 2
So in part 1 I talked about the “why” of geo filter. Now let’s get a bit more technical and talk about the “how”. The foundation So first of all, I will explain briefl…
agderinthe.cloud
November 12, 2025 at 7:30 AM
This looks very, very interesting! #Entra #ZeroTrust
👋 Folks, I'm super excited to announce the launch of the Microsoft Zero Trust Assessment!

I've been working on this project for the past year at Microsoft with an extended team including our security researchers, product feature teams and docs

Here's what it does
November 12, 2025 at 7:13 AM
🔐 Geo-blocking in Entra Conditional Access – low effort, high impact? 🌍

✅ Why it matters
✅ When it works
⚠️ When it doesn’t
💡 And how to start thinking about your own setup
👇 Read the full post below
agderinthe.cloud/2025/11/06/d...
#Entra #IdentitySecurity #AgderInTheCloud
Diving into geo filter with Entra Conditional Access – Part 1
After a hectic few weeks and the NIC conference now behind me, it’s time to get back to blogging! 🥳 This will be the first part of a small blog series where I want to talk more in detail abou…
agderinthe.cloud
November 6, 2025 at 7:14 AM
Reposted by Per-Torben Sørensen
Sooon we're up at room 4 - NIC RebelEdition!!
@per-torben.sorensen.ws #NIC #crayon #rebeledition
October 30, 2025 at 12:31 PM
Chinese buses have major security flaw, says Oslo operator - The Economic Times share.google/P2Xk0J7nOphh...
Chinese buses have major security flaw, says Oslo operator
Oslo's fleet of electric buses, imported from China, is facing a significant security challenge due to a software flaw that may allow manufacturers or unauthorized individuals to seize control. Ruter,...
share.google
October 30, 2025 at 12:30 PM
Reposted by Per-Torben Sørensen
The #PSConfEU MiniCon schedule is here! 🚀
An evening of #PowerShell, #Automation, #AI, #DSC, #Testing & more.

📅 14 Oct 2025 | Online | Starting at 4pm (CET)
🎟️ Tickets: synedgy.com/psconfeu-minicon

#DevOps #Community
October 6, 2025 at 5:30 AM
STOP granting people Global Admin in your tenant please!!

There are so many traps to fall in, and delegation may seem too complicated. (It's not)

Read my latest post on Agderinthe.cloud and I think you will have a better experience.
#Entra #ZeroTrust agderinthe.cloud/2025/09/17/u...
Use RBAC to supercharge your Entra Admin Units
In my earlier post, I called Restricted Administrative Units (RAU) the “real star of the show.” Administrative Units (AUs) scope directory objects like users, groups and clients. Restri…
agderinthe.cloud
September 17, 2025 at 6:09 AM
Reposted by Per-Torben Sørensen
T-1 month: Exchange Server 2016 and Exchange Server 2019 End of Support
T-1 month: Exchange Server 2016 and Exchange Server 2019 End of Support | Microsoft Community Hub
 
techcommunity.microsoft.com
September 15, 2025 at 4:34 PM
Yesterday on Linkedin I shared another story about device codes being exploited by hackers, so this seems like a good time to link my blog post regarding #Devicecode on agderinthe.cloud

agderinthe.cloud/2025/01/31/i...
I’m so ACDC! – Alarmingly Concerned (about) Device Codes!
What’s a Device Code? When you want to log in and authenticate to Entra ID, you may not always have the same input capabilities as you have on your computer. This can be devices without keybo…
agderinthe.cloud
September 2, 2025 at 6:45 AM
🚨 Breaking News for Exchange Admins! 🚨

You can now convert hybrid mailboxes to cloud-only, even if the useraccount is still synced from Active Directory.

👇 Read all about it in my latest blog post, linked below.

#Entra #Exchange #AgderIntheCloud

agderinthe.cloud/2025/08/26/c...
Cloud‑Only Mailboxes: The Exchange Update That Changes Everything!
🚨 My planned follow-up post on AU and RAU will have to wait a little, because this is breaking news!🚨 Exchange admins: On August 20, Microsoft quietly rolled out a long‑awaited capability: The powe…
agderinthe.cloud
August 26, 2025 at 7:28 AM
🤩 AU and RAU can really help you enforce Just-Enough-Access in your tenant.

👇 Read my introduction to AU and RAU below and in my next post I will take it even further. Which I hope I will publish it next week. 👇
#Entra #JustEnoughAccess
agderinthe.cloud/2025/08/21/e...
Entra Admin Units are a hidden gem!
As you probably already know, Entra ID is packed with a lot of different features and more features are constantly being added or expanded upon. Naturally some of these features leave a larger impa…
agderinthe.cloud
August 21, 2025 at 6:59 AM
First blogpost after a nice summer vacation! A look into converting security groups from synchronized to cloud-only! #Entra #AgderInTheCloud
agderinthe.cloud/2025/08/11/t...
The road to cloud-only security groups
🌴The summer vacation is now over and after several weeks with more sun and less computer screen, and I hope you all enjoyed it as well. Anyway, I am back again so let us not waste any time and get …
agderinthe.cloud
August 11, 2025 at 6:40 AM
I normally want this to be a #Trump free space, but if this powerful reporting can help spread awareness of the facts in the ongoing Epstein/Trump chaos it will be worth it. This clip by #Lawrence was great! 👌https://youtu.be/ngbIy4V4c0o?si=T2-W5alGh65_M1EZ
July 18, 2025 at 9:02 AM
@psconf.eu "Be excellent to each other!" Looking forward to 4 days of #PSConfEU
June 23, 2025 at 8:21 AM
After just over a year since it came in publc preview, I thought it was about time to give #passkey in #Entra a new look and see how it holds up.

agderinthe.cloud/2025/05/07/t...
The state of the (Passkey) union, May 2025
The story so far Just over a year ago (April 2024) we finally got the public preview of passkeys as authentication method in Entra ID. This was my most anticipated feature for 2024 and I eagerly aw…
agderinthe.cloud
May 7, 2025 at 7:54 AM
🚨 Are you aware that Conditional Access policies does not apply to your apps and service principals? They seem to "do their own thing".

📢 Then read (and please share) my latest blog post 👇

#Entra #WorkloadID #Security #ConditionalAccess

agderinthe.cloud/2025/04/30/w...
Why you should look at Entra Workload ID
What is a “Workload Identity” anyway? So let’s start with the beginning. A “Workload identity” is for all intents and purposes a more modern alternative for traditiona…
agderinthe.cloud
April 30, 2025 at 6:16 AM
New Microsoft-managed Conditional Access policy incoming. This time it's device-code flow which will be blocked and you have 45 days to evaluate and configure it. DON'T SLEEP ON THIS!! And you can read more about device-code flow on my blogpost here. agderinthe.cloud/2025/01/31/i...
April 29, 2025 at 8:39 AM
Reposted by Per-Torben Sørensen
🚨New #PowerShell Version v7.5.1 has been released
bit.ly/42WGFXb
April 25, 2025 at 6:24 AM
So happy and proud to be speaking at Workplave Ninjas Norway this june! Hope to see you there! #WPNinjasNO www.linkedin.com/posts/workpl...
#identitysecurity #entraid #wpninjasno | Workplace Ninjas Norway
Protect your digital identities! Join Per-Torben Sørensen for a deep dive into enhancing Entra ID security through Conditional Access and passkeys. This level 300 session will teach you practical hard...
www.linkedin.com
April 23, 2025 at 7:08 AM
😱 When I thought #Trump no longer could shock me! This is sheer terror and I dare say a mandatory view for people both in and outside the united states. PLEASE WATCH! youtu.be/aPFo2nS19D0?...
Lawrence on Trump attacking the rule of law: We are all Harvard. We are all Abrego Garcia.
YouTube video by MSNBC
youtu.be
April 15, 2025 at 10:55 AM
If you or your coworkers keep searing to find files, that's a clear sign that you should revisit where you store your files. Luckily it's very easy to move them around!
🔍 Ever feel like your files are playing hide and seek? One moment they're here, the next they're over there, and sometimes, who knows where! 🔎
If your documents are scattered like confetti after a party, it's time to gather them all in one place 🎊

tinyurl.com/2y46wmkp
Need to move files and folders from one team to another?
Ever feel like your files are playing hide and seek? One moment they’re here, the next they’re over there, and sometimes, who knows where! If your documents are scattered like confetti …
tinyurl.com
April 4, 2025 at 6:20 AM
📢 Did you know you can use QR code to easily and securely log in to #Entra using a mobile device?

🤩 QR Code Authentication is in public preview and can make the day easier for both admins and frontline workers

👇 Look at my latest blogpost for more information 👇

agderinthe.cloud/2025/04/03/u...
Use QR Code Authentication for secure and lightweight logins
QR codes are now in preview in Entra ID, and this is a login method designed exclusively for mobile devices (Android/iOS). It is important to keep in mind that this is primarily for Frontline worke…
agderinthe.cloud
April 3, 2025 at 6:28 AM