Dynamic Entra Group
Summary This postmortem analyzes why a seemingly simple requirement—automatically adding only newly onboarded users or newly enrolled devices to a Windows Hello for Business (WHfB)–enabling Entra ID group—became a production friction point. The core issue stemmed from misaligned identity lifecycle signals, incorrect assumptions about dynamic group capabilities, and lack of a clean onboarding discriminator between … Read more