Jon
Hope.
M365 Solutions Architect at inforcer · Security: Identity & Access
I help MSPs and enterprise teams lock down Microsoft 365 through smarter identity configuration, Conditional Access policy, and ITDR. If it touches Entra ID, I’ve probably written about it.
Focus Areas
The M365 security topics I write about, speak on, and architect every day.
Conditional Access
Zero Trust access policies that work in production. MFA enforcement, device compliance, FIDO2, and named locations.
Entra ID & Identity
Identity is the foundation of everything in M365. Hardening your IdP is the single highest-leverage security move you can make.
ITDR & Defender for Identity
Behavioral baselines and signal correlation. Knowing what normal looks like so you can catch what isn’t.
Privileged Identity Management
Just-in-time access and standing privilege elimination. Nobody needs permanent Global Admin.
MSP Security at Scale
Multi-tenant M365 hardening for managed service providers. Consistent baselines across hundreds of client tenants.
Security Baselines
CIS benchmarks, Secure Score, and practical configuration management. Standards that actually get deployed.
Resources & Reference
Open reference material, cheat sheets, and baselines. All public, all free.
CA Policy Analyzer
Score your tenant’s Conditional Access posture. CIS alignment, FOCI risk detection, and 39 best-practice policy templates. Free, browser-only.
↗ Reference GuideMicrosoft Graph API Cheat Sheet
A practical, engineer-focused reference for discovering and using Microsoft Graph endpoints that return Entra ID data.
↗ Policy TemplatesConditional Access Policy Templates
40 best-practice CA policies with ACME naming convention, group structure, FOCI guidance, and break-glass coverage.
↗ Baseline
Entra ID Security Baseline
Configuration reference and baseline documentation for hardening Entra ID tenants. Built for MSPs and enterprise architects.
↗Writing
Practical content on M365 identity security. No fluff, no vendor spin.
Identity Is Everything: What ITDR and Your Front Door Have in Common
Defense in depth, Zero Trust, RBAC, and ITDR explained through everyday life. The insider threat scenario that shows why signal correlation matters.
↗ MediumMore on Medium
Follow along for regular writing on Conditional Access, Entra ID hardening, MSP security strategy, and the latest from the M365 landscape.
↗
Entra.News
Curated by Merill Fernando — the Microsoft Entra community’s most-read weekly digest. Including 🥇 #1, 🥈 #2 & 🥉 #3 Most Popular Post.
View all features ↗Appearances
Guest sessions, podcast recordings, and live events on identity security, Conditional Access, and M365 strategy.
YouTube Appearances
Watch Jon on YouTube — covering identity security, Conditional Access, and Microsoft 365 strategy across guest appearances and sessions.
↗Speaking & Events
Live and virtual event appearances coming soon. Follow on LinkedIn to stay updated on upcoming sessions.
Let’s talk M365 security.
MSP or enterprise — Conditional Access, ITDR, or identity hardening. Reach out on LinkedIn.