Jon Hope

M365 Solutions Architect at Inforcer

Tenant is the new server, Identity is the foundation and Conditional Access is the perimeter. I make sure policy intent becomes real, enforceable protection.

About me GitHub

Entra · Conditional Access Enabled

// CA-001
Require MFA for all users
assignmentsAll users
target resourcesAll cloud apps
grantrequireMfa
networkAny location
excludesbreak-glass

Identity is Everything

Microsoft Entra ID

Identity architecture, authentication methods, and threat detection across the directory.

authentication

Conditional Access

Policy design, exclusions, service principal gaps, named locations, and device compliance.

policy-design

M365 Governance

Group lifecycle, ownership models, tenant cleanup, and Copilot readiness.

lifecycle

Tech, Fun & Projects

Flagship

CA Policy Analyzer

Scan a tenant's Conditional Access posture in seconds. Surfaces coverage gaps, risky exclusions, and service principal blind spots before an attacker does.

Open the analyzer

100%

coverage

12

gaps found

Graph API Reference

Copy-ready Microsoft Graph calls for identity and policy management.

CA Policy Templates

Battle-tested Conditional Access baselines you can deploy and adapt.

Entra Baselines

Hardening references for a clean, defensible Entra tenant.

Latest from the blog.

RSS Medium View all articles

Entra Series · PT02 Latest

Mastering Groups: The Deep Dive

The complete reference to Microsoft 365 group types, creation controls, lifecycle governance, and the directory settings that underpin every workload in your tenant.

Aug 2, 2026

Aug 12, 2026