Phase 2 of my SC-500 project: building Named Locations, then layering five report-only Conditional Access policies on top of the JIT model from Phase 1 — admin MFA, country blocking, sign-in risk, user risk, and legacy authentication.
Phase 1 of my SC-500 project: converting a privileged Entra ID role from a permanent active assignment into an eligible, just-in-time assignment with Privileged Identity Management — activation requirements, approval workflow, and access reviews.
Phase 0 of my SC-500 project: setting up a throwaway Azure tenant, standing up a dedicated Global Administrator, designing a break-glass emergency access account, creating test users and groups, enabling MFA, and activating the Microsoft Entra ID P2 trial.