In this episode of The Zero Trust Zone, we tackle a topic many teams avoid—identity governance—and show why it’s absolutely essential in a Zero Trust world.Joining us is Microsoft MVP and identity expert Jan Vidar Elven, who breaks down how Microsoft Entra Identity Governance can help organizations automate, secure, and streamline access—without drowning in complexity.We discuss:🔹 What identity governance really means🔹 Key components like Lifecycle Workflows, Access Reviews, Entitlement Management, and PIM🔹 Where to start if you’re new to Entra ID Governance🔹 Common pitfalls and best practices from the field🔹 Why governance is critical to both security and complianceIf you’re dealing with access sprawl, compliance pressure, or just want to clean up your Entra tenant—this episode is for you.

Welcome back to The Zero Trust Zone! In this episode, we’re joined by Microsoft MVP and identity security expert Thomas Naunheim to dive deep into a powerful Zero Trust design pattern: the bastion tenant.

👉 What is a bastion tenant?

👉 Why are more organizations isolating their admin identities into separate, hardened tenants?

👉 Is this a must-have security strategy—or just a legacy relic from on-prem Active Directory guidance?

We break down what a bastion tenant really is, how it fits into your modern cloud architecture, and whether it's worth implementing in your own environment.

For more information on the elements discussed in this episode, make sure to check out the following links:

- https://www.entraops.com (https://www.cloud-architekt.net/entraops/)

- https://www.glueckkanja.com/en/security/managed-red-tenant (Glueck Kanja)

In this episode of the Zero Trust Zone podcast, host Michael Van Horenbeeck speaks with Rohit Gulati from Microsoft about decentralized identities and their growing importance in cybersecurity. They discuss the principles of decentralized identity, the role of trust systems, and how Microsoft is addressing these challenges with its verified ID solution. The conversation also touches on the need for portable identities, the balance between authorization and authentication, and the future of identity management in a rapidly evolving digital landscape.