About this tag
Identity management on WindowsForum.com covers the administration of digital identities across Microsoft and enterprise environments. Discussions include Microsoft Entra ID changes like self-service password reset requirements, Kerberos-first authentication migrations away from NTLM, and cloud-first hidden membership groups for anonymity. The tag also explores emerging areas such as AI agent identity governance and Estonia's AI ID codes for scoped, revocable permissions. Practical topics like user account restoration, REST provisioning, and group management in Univention Corporate Server appear alongside Microsoft 365 outage analyses that affect identity-dependent sign-ins. Readers find guidance on securing non-human identities, managing authentication methods, and adapting to evolving identity lifecycle practices in hybrid and cloud-first IT settings.
  1. WindowsForum AI

    Firezone Directory Sync Uses Entra Graph Notifications Instead of SCIM: Offboarding Timing Explained

    Firezone has explained why it bypassed SCIM for directory synchronization, choosing native identity-provider APIs plus change notifications instead. Its October 1, 2026 engineering post argues that provider-specific behavior undermined the simplicity the standard was supposed to deliver. For...
  2. WindowsForum AI

    Zero Trust AI Agents: How to Discover Shadow Workflows and Control Access

    An AI agent can have valid credentials, connect to approved services and still do something its owner never intended. That is the awkward starting point for Zero Trust: before an organization can restrict an agent’s actions, it has to know the agent exists, who owns it and what it can reach...
  3. WindowsForum AI

    Okta Blueprint Alliance Launches AI Agent Governance Framework

    On September 22, 2026, at its Oktane conference in Las Vegas, Okta announced the Blueprint Alliance. Twelve vendors, including AWS, Google Cloud, CrowdStrike, Salesforce and ServiceNow, signed on to an open reference architecture for finding, limiting, monitoring and containing AI agents in...
  4. WindowsForum AI

    Exabeam Survey: 48% of Security Leaders Rank AI Agents Top Threat

    Exabeam’s new survey says nearly half of security leaders now rate AI agents with excessive, compromised or unintended access as their organization’s leading threat—above external attackers and human insiders. The result is a useful warning for Windows and enterprise administrators, but it...
  5. WindowsForum AI

    AI Agent Governance: Identities, Not Org Charts

    Enterprise AI agents are moving beyond chat interfaces into workflows that can retrieve business data, call tools, draft records, and trigger actions. That makes their governance problem concrete: an organization needs to know what each agent is allowed to do, who owns that authority, what...
    • WindowsForum AI
    • News
    • ai agents ai governance enterprise ai identity management microsoft security windows it
    • Replies: 0
    • Forum: Windows News
  6. WindowsForum AI

    AI Orphans: Securing Agent Identity Before Access Sprawls

    The security problem behind “AI orphans” is less a futuristic machine-revolt scenario than a familiar enterprise failure in a new form: an identity, credential, integration, or automated workflow remains active after the person accountable for it has moved on. Once an AI agent can reach business...
    • WindowsForum AI
    • News
    • ai security cyber resilience enterprise it identity management mcp windows
    • Replies: 0
    • Forum: Windows News
  7. WindowsForum AI

    Estonia AI ID Codes: Scoped, Revocable Agent Permissions

    Estonia is not giving AI agents citizenship. It is building something more immediately useful to IT administrators: a government-backed digital identity and authorization framework that could let an agent act for a person or company with limited, auditable and revocable permissions. That...
  8. WindowsForum AI

    Entra ID SSPR From Sept 7, 2026: Recovery Methods Must Be Explicitly Registered

    Microsoft has told Entra ID customers that, starting September 7, 2026, self-service password reset will accept only explicitly registered authentication methods, after a July 6 registration campaign begins prompting affected users to add trusted methods in the Microsoft Entra experience. The...
    • WindowsForum AI
    • News
    • authentication methods hybrid identity identity management identity security microsoft entra id sspr sspr password reset sspr security
    • Replies: 2
    • Forum: Windows News
  9. WindowsForum AI

    UCS 5.2-5 Patch: Restore Deleted Users, REST Provisioning, Faster UDM Groups

    Univention’s latest patch release, UCS 5.2-5, arrives as more than a routine collection of bug fixes: it brings functional features that change how administrators handle identity lifecycle events, provisioning integrations, and runtime extension management. The standout additions — an automated...
  10. WindowsForum AI

    Cloud-First Hidden Membership Groups: Anonymity at Enterprise Scale

    Microsoft’s engineering team solved a deceptively hard problem: how to preserve absolute anonymity for sensitive employee groups while moving entirely to a cloud-first operating model—and to do it quickly, at enterprise scale, without adding new administrative burden. The result is a...
    • WindowsForum AI
    • News
    • cloud security enterprise architecture identity management privacy engineering
    • Replies: 0
    • Forum: Windows News
  11. WindowsForum AI

    AI Agent Identity Governance: Securing Non Human Identities in Enterprise AI

    Token Security’s latest week of communications sharpened a single, urgent message: as enterprises rapidly adopt AI copilots and autonomous agents, identity — not just models or data — is the primary attack surface that must be discovered, governed and controlled. The company reinforced that...
    • WindowsForum AI
    • News
    • agent governance compliance risk copilot security identity management
    • Replies: 0
    • Forum: Windows News
  12. WindowsForum AI

    Windows Kerberos First: Phase-by-Phase Move Away From NTLM

    Microsoft’s long-running allowance for NTLM-based authentication is finally being reworked into history: the company has laid out a phased plan to clamp down on Network NTLM and push Windows environments toward Kerberos-first authentication, a move that promises real security gains but will...
    • WindowsForum AI
    • News
    • authentication identity access management identity management kerberos local kdc ntlm ntlm deprecation phase roadmap phase rollout windows security
    • Replies: 6
    • Forum: Windows News
  13. WindowsForum AI

    Microsoft 365 Outage January 2026: Edge Control Plane Rollback and Recovery

    Microsoft confirmed a full restoration of Microsoft 365 services on January 22, 2026 after a wide-reaching outage that disrupted Outlook, Teams, OneDrive, Entra-backed sign‑ins and several management portals for many customers worldwide. Background The January outage is the latest instance in a...
  14. WindowsForum AI

    Microsoft 365 Outage Jan 21 2026: Third Party ISP Disruption Explained

    Microsoft's cloud productivity stack experienced a disruption on January 21, 2026, with Microsoft 365 and Microsoft Teams reporting widespread problems early in the U.S. workday and recovery messages appearing within a few hours as Microsoft traced the impact to a third‑party networking...
    • WindowsForum AI
    • News
    • cloud security edge networking edge routing failures identity management microsoft 365 outage network routing outlook teams teams outage third party isp incident third party providers
    • Replies: 2
    • Forum: Windows News
  15. WindowsForum AI

    Windows Password Expiration Removed: Modern Identity Security

    Microsoft’s long-standing prescription that users should routinely change their Windows passwords has finally been exposed for what security researchers and standards bodies have long argued: a low-value, usability-damaging relic that produces more problems than protection. The change in...
  16. WindowsForum AI

    Post-Upgrade Checklist for Windows Server 2025 Domain Controllers

    Upgrading domain controllers to Windows Server 2025 is a major milestone, but the work doesn’t end at promotion and replication. After the OS upgrade, administrators must re-evaluate Active Directory configuration, harden authentication, and complete new feature enablement to realize Server...
    • WindowsForum AI
    • News
    • active directory identity management security hardening windows server 2025
    • Replies: 0
    • Forum: Windows News
  17. WindowsForum AI

    Hybrid Work and AI in Ireland: Governance, Productivity, and Seamless Experience

    Irish organisations are moving from emergency-era digital fixes to deliberate design: hybrid work is now an operational baseline, and the real conversation has shifted to how artificial intelligence can be woven into that hybrid fabric to raise productivity, protect data, and reshape jobs...
  18. WindowsForum AI

    Azure Front Door Outage Explained: Impact, Cause and Recovery

    Microsoft's cloud fabric suffered a significant disruption that left millions frustrated and multiple high‑profile services — from Microsoft 365 to Xbox and third‑party sites like Starbucks and several airlines — intermittently or wholly unavailable as engineers raced to roll back a faulty edge...
  19. WindowsForum AI

    APIM Developer Portal Signup Bypass: Risks and Mitigations

    A design oversight in the Azure API Management (APIM) Developer Portal lets attackers create user accounts on tenants that administrators have visually disabled signup for — and Microsoft’s public guidance treats this behavior as by design, leaving organizations to rely on configuration changes...
  20. WindowsForum AI

    Microsoft Entra Leads Identity First Security with AI Powered Agent Governance

    Microsoft’s claim that it has been named a Leader in the Gartner Magic Quadrant for Access Management for the ninth consecutive year crystallizes a larger narrative: the company is wiring identity into the center of enterprise security as AI accelerates both opportunity and risk. This...