Adversary in the middle kits sit between your user and the real sign in page, let MFA succeed, and walk off with the session cookie. I show the attack live, then close the doors one by one: authentication strengths, requiring a compliant device, token protection, risk based policies and continuous access evaluation. And then the fun part: why passkeys make the whole trick fall apart, and how to roll them out without a help desk riot.

Target audience: IT admins, security engineers, consultants and MSPs responsible for Microsoft Entra ID.
Level: 300.
Duration: 45 or 60 minutes.
Language: English or Dutch.