Thanks for accepting the invite! I’m GA now
Wednesday 10 February 2027, 13:30–14:30
Speakers
- Fabian Bader
- Thomas Naunheim
About this session
SESSION INFORMATION SHARED UNDER "NDA" - DO NOT SHARE OR DISCUSS WITH OUTSIDE PARTIES! With Entra ID governance you gain a lot of control over tenants in your enterprise. But with great power comes great responsibility and in this session we will discuss a novel lateral movement path introduced by this feature in every tenant. Moving from theory to defense, we will share real-world insights on how to design a secure, delegated access model using Entra ID Governance. We will cover how to protect access both from the managing and in the managed tenant, and why your Conditional Access design must specifically account for these cross-boundary access paths. Finally, we will demonstrate how to detect unauthorized modifications to trust relationships and hunt for these lateral movement paths using EntraOps, empowering you to protect your multi-tenant environment.