TLDR: You can set up Claude single sign-on (SSO) with Microsoft Entra ID in about 10 minutes on a paid Claude Team or Enterprise plan. The process has three parts: verify your company domain in Claude, connect Claude to Entra through Claude’s guided setup, and control access by assigning users or groups in Entra. Once […]
An employee opens Claude on their laptop. It is free, it is fast, and within ten minutes they have pasted in a contract, a financial summary, and a list of customer records, all because they are trying to get their job done. No audit trail. No admin visibility. And depending on their account settings, that […]
On March 11th, 2026, employees at Stryker began their day to blank screens. Within three hours, roughly 80,000 devices had been wiped across the company’s 61-country footprint. Not encrypted. Not ransomed. Erased. No malware was involved. An Iran-linked hacktivist group compromised an admin account and used Microsoft’s own Intune remote wipe capability to erase the […]
Most MSPs don’t discover security gaps because they were looking for them. They find them mid-ticket, during a breach, or when a client calls with a problem that shouldn’t exist. A Conditional Access policy that was never deployed. Legacy authentication still wide open. Something that should have been caught six months ago. I built CloudCapsule […]
Here’s something that bothers me about the MSP industry: we hand technicians the keys to dozens, sometimes hundreds, of Microsoft 365 tenants, and then we expect them to just figure out security on the job. No structured training. No safe place to practice. Just production environments and the hope that nothing goes wrong. If you’re […]
Cyber Essentials is supposed to make your business safer but for many organizations, it ends up feeling expensive, overwhelming, and confusing. You start Googling Cyber Essentials tools and Cyber Essentials requirements, and suddenly you’re facing: A stack of quotes from new vendors Tools you’ve never heard of Technical controls that feel impossible to map The […]
If you’re an MSP, you’ve probably seen it: the business wants frictionless collaboration with vendors, contractors, and partner companies. They’re sharing files in SharePoint, chatting in Teams, moving fast… and the security model quietly drifts into “wide open.” This post walks through a real-world-style scenario (Tech Corp) and the exact Microsoft 365 controls that can […]
Privileged accounts are the #1 target for attackers. One compromised Global Administrator can mean full control of mail, SharePoint, Teams, Defender…everything. The fallout is real: downtime, legal exposure, regulatory headaches, and direct financial loss. A pattern I see often: IT teams feel safe because they’ve rolled out MFA and Conditional Access for users… while the […]
If there’s one lever MSPs should be pulling right now, it’s this: AI is your fast track to relevance in the C-suite and specialization in your services. For years, MSPs have struggled to break out of the cost center box. Security conversations are often dismissed unless there is a breach. Productivity talks get buried under […]
In March 2023, Microsoft announced the deprecation of managing authentication methods in the legacy multifactor authentication and self-service password reset (SSPR) policies. Beginning September 30, 2025, authentication methods can’t be managed in these legacy MFA and SSPR policies. In this article, I will be breaking down these changes so you understand how to prepare with […]
Earlier this year, Microsoft made the E5-Security add-on available for Business Premium subscribers. It’s packed with a ton of amazing security features. Additionally, it is a significantly reduced price than if you were to upgrade to E5 altogether. In this article, I will share the highlights of what is included with the add-on. What’s Included […]
Risky user detections are one of the leading indicators of account compromise in Microsoft 365. By default, you will not get alerted as an MSP for a new risky user. I just talked to an MSP last week who had a client that wired 500k to a fraudulent bank account after the user account was […]
