Are your Microsoft Conditional Access policies as secure as you think, or have they been turned into Swiss cheese? Following our premier episode on passkeys and tenant governance, Episode 2 of the Identity Roundtable dives straight into the weeds of identity red teaming. We are joined by Fabian Bader, a Cybersecurity Architect at glueckkanja and Microsoft Security MVP, to explore his research into Microsoft Entra and Conditional Access bypasses. Fabian reveals the surprising, behind-the-scenes token flows and undocumented API behaviors that allow attackers to quietly slip past your defenses - often using the very exclusions and documentation Microsoft provides.

In the very first episode of Identity Roundtable, we kick things off from the Microsoft MVP Summit with a candid, unscripted conversation on where identity is heading.

We dive into the realities of passkey: the promise, the pitfalls, and the trade-offs most people don’t talk about. From synced vs. device-bound credentials to attestation and real-world adoption challenges, nothing is off-limits.

We also explore the evolving world of multi-tenant identity, including Microsoft Entra’s new tenant governance capabilities, and what they mean for security, control, and architecture in modern environments.

Expect sharp insights, practical experience, and a few honest disagreements just like the conversations that inspired this podcast.