84,753 questions with Microsoft Security-related tags

Sort by: Updated
1 answer

ID token validation failing after successful sign-in

We're integrating our application with Microsoft Entra External ID using OpenID Connect. Users are able to sign in successfully, and we receive the ID token, but our application fails when validating the token signature. We're currently not sure if we're…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-06-19T04:51:39.5833333+00:00
Luca 0 Reputation points
commented 2026-06-19T11:58:19.17+00:00
VEMULA SRISAI 13,415 Reputation points Microsoft External Staff Moderator
1 answer

domain verification failed

I created a new Azure account for my office and added a custom domain name and updated the values in DNS TXT record, but could not able to verify my domain, so i checked in whatismytenantid.com and entered my domain name it shows a tenant id which does…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-06-18T12:34:29.23+00:00
Pavithra Selvakumar 0 Reputation points
answered 2026-06-19T11:10:00.1966667+00:00
Antonino Schiliró 0 Reputation points
1 answer

verify code

i can not put my new mobile phone number on my microsoft account as i originally set it up with my land line number to when it is asking me to verify with text number it is using my land line number and a code will not come through

Microsoft Security | Microsoft Authenticator
asked 2026-06-18T18:22:30.25+00:00
stephen peters 0 Reputation points
answered 2026-06-19T11:06:29.4966667+00:00
Antonino Schiliró 0 Reputation points
1 answer

How to recover Discord from WinAuth?

I’ve had a discord account and I factory reset my PC and the discord account had 2FA. I have no backup codes or anything from WinAuth (Windows Authenticator) Is there still a chance to get the discord account back???

Microsoft Security | Microsoft Authenticator
asked 2026-06-19T00:23:59.9366667+00:00
Baldi Studios 0 Reputation points
answered 2026-06-19T11:04:03.9266667+00:00
Antonino Schiliró 0 Reputation points
1 answer

Can't add Touch ID as a sign-in method

I'm using school account. I'm trying to add Touch ID as a sign-in method, but the system says 'Passkey not registered - This might be due to a timeout, a canceled request or a private browsing window.' even though I tapped the Touch ID sensor right away…

Microsoft Security | Microsoft Authenticator
asked 2026-06-19T07:26:44.51+00:00
Hyunmin Kim 20 Reputation points
answered 2026-06-19T11:00:30.2+00:00
Antonino Schiliró 0 Reputation points
1 answer One of the answers was accepted by the question author.

Delayed Event Availability / Ingestion Latency on Entra ID riskDetections Graph API Endpoint

Hi, We are currently ingesting Entra ID Risk Detection events into our platform using the Microsoft Graph API v1.0 endpoint: GET /identityProtection/riskDetections We have implemented a time-based polling mechanism, but we are noticing that several risk…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-06-18T07:06:39.4233333+00:00
Nisha Das 50 Reputation points
accepted 2026-06-19T10:46:53.2566667+00:00
Nisha Das 50 Reputation points
0 answers

How to fix authenticator issues between Azure and Authenticator

Azure wants 6-digits and Authenticator generates 8-digits. Everything else I use authenticator for work fine, just not Azure.

Microsoft Security | Microsoft Authenticator
asked 2026-06-18T21:06:59.7266667+00:00
DENISE BREINING 0 Reputation points
edited the question 2026-06-19T10:11:12.4266667+00:00
Gérard Oomens 123.9K Reputation points Volunteer Moderator
1 answer

Getting a list of users whole PIM role assignments are about to expire

I would like to know if its possible to get a list of users whose PIM directory role assignments are about to expire, usually an email gets sent with 14 days to go, but keen to understand if there is a powershell script that can be executed to show…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-06-19T09:48:18.2933333+00:00
MrFlinstone 761 Reputation points
commented 2026-06-19T10:01:18.34+00:00
Sridevi Machavarapu 33,305 Reputation points Microsoft External Staff Moderator
1 answer

Reduce expiry dates for existing Client Secrets for App Registrations & Service Principals?

Hello! In the past, our organization has generated client secrets for SPNs with a secret expiry date of 10 years in the future. With a policy update, this is no longer allowed. Instead of forcing a large number of customers to replace their secrets right…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-06-19T09:25:26.82+00:00
Michael Herold 0 Reputation points
commented 2026-06-19T09:36:59.2733333+00:00
Sridevi Machavarapu 33,305 Reputation points Microsoft External Staff Moderator
1 answer

Azure File Share ACL permission inheritance not working for new Entra ID users/groups

The Azure file share is accessed by AVD users on multi-user session hosts. This was setup and working fine when the environment was a hybrid on-prem AD to Entra sync setup, Azure files was configured using kerberos authentication and all was good.…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-06-18T02:02:56.62+00:00
Leo Pearce 5 Reputation points
commented 2026-06-19T09:31:11.51+00:00
Sridevi Machavarapu 33,305 Reputation points Microsoft External Staff Moderator
2 answers

AxiosError: Network Error

I am attempting to create a case in eDiscovery. When signing into Purview, I receive a pop-up error on the right side. I have cleared my cache; I have signed into my VPN to connect to the network. My admin has gone over my permissions, and according to…

Microsoft Security | Microsoft Purview
asked 2026-06-17T17:04:58.16+00:00
Andre Livingston 0 Reputation points
commented 2026-06-19T09:21:24.8833333+00:00
Pilladi Padma Sai Manisha 10,190 Reputation points Microsoft External Staff Moderator
1 answer

Some issues with Purview's under-the-hood implementation.

What is the current write limit and the maximum concurrent write limit for a single Purview Account? Under what specific circumstances will an HTTP 408 error be triggered? I would like to know about the underlying architecture of Purview. Is the Index…

Microsoft Security | Microsoft Purview
asked 2026-06-17T03:55:13.85+00:00
Mofei Zhuang 140 Reputation points Microsoft Employee
commented 2026-06-19T09:13:31.5833333+00:00
Pilladi Padma Sai Manisha 10,190 Reputation points Microsoft External Staff Moderator
1 answer

Issue with authenticated App Service

I have created an ASP API app written in C#. The app is expecting Access Tokens issued by an Entra directory. When I test on my laptop, I get an access token, then use it call the locally hosted API and it all works fine. When I deploy the API to…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-06-19T07:25:32.74+00:00
Paul Harris 0 Reputation points
edited a comment 2026-06-19T09:04:43.23+00:00
Praneeth Maddali 10,460 Reputation points Microsoft External Staff Moderator
0 answers

How to fix MS Defender app Web Protection has been turned off on Android phone issue.

Hello, I just recently reset my app and now I am getting constant messages from the app saying: Web protection has been turned off. Then seeing the details, I get the Protection off Anti-phishing Settings. The app is already set to Unrestricted. Managed…

Microsoft Security | Microsoft Defender | Other
asked 2025-11-07T04:38:50.62+00:00
Christina Szeman 1 Reputation point
commented 2026-06-19T08:41:49.3433333+00:00
David 0 Reputation points
2 answers One of the answers was accepted by the question author.

Unable to Create Defender for Endpoint Device Groups (Machine Groups) for Web Content Filtering Scope – Tenant Shows Defender for Business Subscription State Despite MDE Plan 2 License

Hi Team, We are trying to configure Web Content Filtering in Microsoft Defender and scope the policy to a specific Device Group (Machine Group) instead of applying it to All devices in the organization. As per Microsoft documentation, Device Groups…

Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
asked 2026-06-18T15:41:48.7233333+00:00
Niharika P 60 Reputation points
commented 2026-06-19T08:35:47.0833333+00:00
Niharika P 60 Reputation points
3 answers

I'm getting notifications that someone wants to sign in to my Outlook using the Authenticator

Someone or some bot is trying to access my Outlook email and I'm getting notifications via Authenticator to choose the correct number for access or deny it. I'm denying it, of course, but these requests are coming multiple times a day. How do I prevent…

Microsoft Security | Microsoft Authenticator
asked 2026-06-18T22:53:11.57+00:00
Bob Ligget 0 Reputation points
answered 2026-06-19T08:27:51.5566667+00:00
Julie Huynh 1,530 Reputation points Independent Advisor
2 answers

NDES machine certificate (Intune SCEP profile) not auto renewing (sometimes?)

My machine certificates issued from internal CA via NDES/SCEP profile in Intune do not always renew Recently had a bunch of users that needed manual sync forced on their AAD joined/Intune managed machines with cable connection to obtain the new…

Microsoft Security | Intune | Other
asked 2023-01-10T12:35:28.657+00:00
Sebastian Cerazy 351 Reputation points
commented 2026-06-19T07:22:19.66+00:00
Sebastian Cerazy 351 Reputation points
0 answers

New-MgInvitation_CreateExpanded: Invitations are blocked for this directory due to suspicious activity.

Issue Description: ======================= Entra -> Inviting external user through GUI or through New-MgInvitation fails. Note: => It worked before! GUI says: User invitation failed -> insufficient privileges to complete operation…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-05-28T20:06:47.9066667+00:00
Miguel Resende 0 Reputation points
edited the question 2026-06-19T08:23:54.2733333+00:00
Miguel Resende 0 Reputation points
2 answers One of the answers was accepted by the question author.

AADSTS5000225: Tenant blocked due to inactivity - Request reactivation

Hi, my tenant has been blocked due to inactivity (AADSTS5000225). Please help me reactivate it. Tenant ID: <pii removed> Trace ID: <pii removed> Correlation ID: <pii removed> Timestamp: 2026-06-12 07:35:09Z I am the administrator of…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-06-12T07:45:02.87+00:00
Hoàng Anh 20 Reputation points
commented 2026-06-19T08:05:16.8766667+00:00
Shubham Sharma 17,675 Reputation points Microsoft External Staff Moderator
2 answers

Conditional access policy - block legacy authentication

Conditional access policy - block legacy authentication I have configured the block legacy authentication policy for a customer and what to verify it. How can I check if this policy is working or not. Can someone please help on this, with the steps to…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2026-06-18T07:45:53.8566667+00:00
commented 2026-06-19T08:08:37.1633333+00:00
Shubham Sharma 17,675 Reputation points Microsoft External Staff Moderator