Microsoft Entra ID ConsultingIdentities. Under control.
Identities are the primary attack target in Microsoft 365. Gordon365 configures, hardens and manages your Entra ID environment — conditional access, MFA, PIM and identity protection.
Reality Check
Identity vulnerabilities are the #1 entry point.
Most successful attacks on Microsoft 365 abuse compromised identities – through phishing, password spraying or missing MFA.
Scope of Services
Complete Entra ID hardening.
Systematic security hardening of all identity and access layers in Microsoft Entra ID.
Conditional Access
Granular access control based on user, device, location and risk.
- Policy design & implementation
- Named locations configuration
- Device compliance integration
- Report-only mode testing
MFA & Authentication
Enforcement of strong authentication for all users and accounts.
- MFA rollout planning
- Authenticator app deployment
- SSPR configuration
- Legacy auth blocking
Privileged Identity Management
Just-in-time administrator access instead of permanent privileges.
- PIM activation
- Eligible role assignments
- Approval workflows
- Access reviews
Identity Protection
Automated detection and response to identity risks.
- Risk policy configuration
- Sign-in risk policy
- User risk policy
- Risky users review
Get started
Configure Entra ID securely.
Structured Entra ID review and hardening — from assessment to production-ready configuration.
Frequently asked questions
What is Entra ID consulting?
Entra ID consulting assesses the identity configuration of your Microsoft 365 tenant: admin roles, MFA, Conditional Access, guests and apps. The result is a remediation plan prioritised by risk.
How long does an Entra ID review take?
Results are usually available within 2 to 4 weeks. The review is billed at a fixed price.
Do I need a specific licence for Conditional Access?
Yes, Conditional Access requires Microsoft Entra ID P1, included for example in Microsoft 365 Business Premium, E3 and E5. Risk-based policies require Entra ID P2.
Will users be locked out during rollout?
No. New policies run in report-only mode first, and emergency access accounts are set up beforehand, so the effect is verified before a policy blocks access.
What does an Entra ID review include?
MFA and authentication methods, Conditional Access, privileged roles and PIM, guest access, and emergency access accounts.
Entra ID Security Baseline: free checklist
23 checks covering admin roles, MFA, Conditional Access and monitoring as a PDF you can tick off.
Related articles
- Conditional Access Baseline for SMEs: The First PoliciesA handful of well-planned policies close the most common attack paths against Microsoft 365 identities – without locking users out.
- Break-Glass Accounts in Entra ID: Securing Emergency AccessWithout working emergency access, a single faulty policy can lock everyone out of the tenant. Here is how to set up break-glass accounts according to Microsoft's guidance.
- Entra ID Consulting: What an Identity Review CoversAn Entra ID review assesses identities systematically. Here are the five areas it covers and what you should hold at the end.
Services
More Microsoft 365 services
- Microsoft 365 Security AssessmentStructured review of identities, devices, sharing and Defender with a prioritised remediation plan.
- Microsoft Intune & Windows AutopilotEnrollment, compliance policies, app protection and endpoint security.
- Microsoft 365 Copilot ReadinessPermissions, sensitivity labels and governance before rolling out Copilot.
- Microsoft 365 Managed ServicesOngoing administration, security and governance in fixed monthly packages.
- Microsoft 365 Administrator on DemandDirect support for administration and troubleshooting when you need it.
- Free Microsoft 365 Security CheckA short self-assessment with an instant view of your security posture.
30 minutes. Real answers.
No pitch decks. No discovery questionnaires. A direct conversation about your M365 environment, your biggest challenges, and whether there's a fit.
- →Free, no-obligation 30-minute call
- →Direct with Gordon — no sales team
- →Structured to deliver value regardless of outcome
- →Response within one business day
- →GDPR / DSGVO compliant data handling