Reseña del libro "Mastering-Microsoft-Entra-ID-Administration (en Inglés)"
Mastering Microsoft Entra ID Administration The Enterprise Architect's Complete Reference Microsoft Learn will tell you what a Conditional Access policy does. It won't tell you that the most common cause of a total tenant lockout is a policy that was correct in every respect except that nobody excluded the emergency access accounts. This book occupies the space between the documentation pages — the reasoning, sequencing, and hard-won operational knowledge that documentation doesn't contain, because documentation is organised by feature and your problems are not. Across 33 chapters it covers the full estate: why IAM exists and how Microsoft identity evolved from NTLM to Entra; standing up a tenant and the decisions you can never undo; licensing arithmetic that routinely finds six figures of double-paying; users, groups, roles, and privileged access; the token model that makes every authentication problem diagnosable in five minutes; the move from MFA to phishing-resistant authentication, including third-party providers; Conditional Access as architecture rather than a pile of policies; hybrid synchronisation and the 2026 deadlines that aren't optional; migration from Active Directory, AD FS, and third-party identity providers; devices across Windows, macOS, iOS and Android; application onboarding and OAuth consent; external identity, mergers, and tenant consolidation; identity disaster recovery; governance, framework mapping, and incident response; AI agent identities; multicloud entitlements; and decentralised credentials. Every section opens with a plain-language analogy before the technical depth, so a newcomer can follow it and an expert can explain it to their board. Every chapter ends with the failure modes — ordered by how often they actually occur — and a checklist for Monday morning. Ten appendices provide a verified PowerShell library, a 20-policy Conditional Access catalogue, annotated SIEM log schemas with detection queries, migration validation test matrices, an emergency access runbook, control mappings for NIST, CIS, ISO 27001 and PCI DSS, and an error code reference. Content reflects the platform as of August 2026, with every deadline dated and every chapter pointing to its living Microsoft source. For: Microsoft 365 administrators who inherited identity, identity engineers, enterprise architects, consultants, and security leaders. No prior Entra ID experience assumed.
