{"slug": "microsoft-entra", "name": "Microsoft Entra", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 3, "commenters": 5, "warners": 0, "score": 3.285, "rising": 0.35, "first": "2025-12-18", "latest": "2026-10-10", "why": "All of the following products and services are fantastic in 2026:", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 2, "compare": 0, "warn": 0}, "spark": [0, 1, 0, 0, 0, 0, 0, 0, 1, 0, 0, 1], "listed": true, "loved": [], "caveat": "", "short_quote": "All of the following products and services are fantastic in 2026:", "icon": false, "domain": null, "github_repo": null, "official_url": "https://www.microsoft.com/en-us/security/business/microsoft-entra", "pricing": "", "aliases": ["Microsoft Entra", "Microsoft Entra ID"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 800516176, "item_id": 50032261, "url": "https://news.ycombinator.com/item?id=50032261", "by": "tialaramex", "date": "2026-10-10", "stance": "recommend", "quote": "Microsoft Entra could default enable Security Keys for authentication. Less friction than remembering passwords or one of those apps on your Phone, but better security.", "excerpt": "Single-sign on is actually a really obvious and familiar example where you achieved better security (now all sixty five systems we use are protected by the same security, when we upgrade that security we're upgrading all sixty five systems) and yet you got better productivity because now I can get stuff done without battling two dozen authentication systems to do it, just sign in once. Another easy thing (unless they", "context": "", "use_case": "authentication", "switched_from": "", "story": "`123456' password used in Danish CPR data breach"}, {"id": 784449862, "item_id": 49028116, "url": "https://news.ycombinator.com/item?id=49028116", "by": "bob1029", "date": "2026-07-23", "stance": "recommend", "quote": "All of the following products and services are fantastic in 2026:", "excerpt": "Microsoft is a big place. I recommend focusing on the parts they do well rather than getting tribal. All of the following products and services are fantastic in 2026: Windows Server SQL Server .NET/C#/F#/Nuget Visual Studio [code] SSMS AAD/EntraID Defender DirectX Excel I agree that Teams still kind of sucks and that Azure is a complete dumpster fire of a cloud, on average. But that doesn't mean we should throw the p", "context": "", "use_case": "", "switched_from": "", "story": "Ask: Why does everything Microsoft create lately feel fragile and half-baked?"}, {"id": 741090400, "item_id": 46318150, "url": "https://news.ycombinator.com/item?id=46318150", "by": "lucideng", "date": "2025-12-18", "stance": "recommend", "quote": "AD/Entra is pretty good in my experience working with it.", "excerpt": "AD/Entra is pretty good in my experience working with it. Self-hosting Entra is basically running a Windows Server + Domain Controller, or one of the alternatives you mentioned. Not something I would typically recommend to a customer unless they already had it running and were experienced in it. IMO, the best way to \"handle identity across Windows and Linux\" is Microsoft's own tools. You can join Windows, Mac, and Li", "context": "works with customers on IT", "use_case": "identity across Windows, Mac, Linux", "switched_from": "", "story": "Ask HN: Self-hosted AD/Entra ID alternative that works with Windows and Linux?"}]}], "caveats": [], "who": [{"by": "jabroni_salad", "context": "Teams admin", "url": "https://news.ycombinator.com/item?id=46828922", "date": "2026-01-30"}, {"by": "lucideng", "context": "works with customers on IT", "url": "https://news.ycombinator.com/item?id=46318150", "date": "2025-12-18"}], "tags": [], "use_cases": ["authentication", "emergency location for teams calling", "identity across windows, mac, linux"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=50031269", "title": "`123456' password used in Danish CPR data breach", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49478178", "title": "Htmx 4.0", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49027955", "title": "Ask: Why does everything Microsoft create lately feel fragile and half-baked?", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46827003", "title": "Microsoft Just Killed the \"Cover for Me\" Excuse: 365 Now Tracks You in Real-Time", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46310562", "title": "Ask HN: Self-hosted AD/Entra ID alternative that works with Windows and Linux?", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"recommend": 1}, "2026-01": {"neutral": 1}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {"recommend": 1}, "2026-08": {"neutral": 1}, "2026-09": {}, "2026-10": {"recommend": 1}}, "quotes": [{"id": 800516176, "item_id": 50032261, "url": "https://news.ycombinator.com/item?id=50032261", "by": "tialaramex", "date": "2026-10-10", "stance": "recommend", "quote": "Microsoft Entra could default enable Security Keys for authentication. Less friction than remembering passwords or one of those apps on your Phone, but better security.", "excerpt": "Single-sign on is actually a really obvious and familiar example where you achieved better security (now all sixty five systems we use are protected by the same security, when we upgrade that security we're upgrading all sixty five systems) and yet you got better productivity because now I can get stuff done without battling two dozen authentication systems to do it, just sign in once. Another easy thing (unless they", "context": "", "use_case": "authentication", "switched_from": "", "story": "`123456' password used in Danish CPR data breach"}, {"id": 792141376, "item_id": 49508836, "url": "https://news.ycombinator.com/item?id=49508836", "by": "mexicocitinluez", "date": "2026-08-31", "stance": "neutral", "quote": "I use Entra, so the session cookies are created through login.microsoft.com.", "excerpt": "I use Entra, so the session cookies are created through login.microsoft.com. Which means I'm not actually managing the session. When I said I don't use sessions, I should have specified I don't use them for application state (or roles and stuff).", "context": "", "use_case": "authentication", "switched_from": "", "story": "Htmx 4.0"}, {"id": 784449862, "item_id": 49028116, "url": "https://news.ycombinator.com/item?id=49028116", "by": "bob1029", "date": "2026-07-23", "stance": "recommend", "quote": "All of the following products and services are fantastic in 2026:", "excerpt": "Microsoft is a big place. I recommend focusing on the parts they do well rather than getting tribal. All of the following products and services are fantastic in 2026: Windows Server SQL Server .NET/C#/F#/Nuget Visual Studio [code] SSMS AAD/EntraID Defender DirectX Excel I agree that Teams still kind of sucks and that Azure is a complete dumpster fire of a cloud, on average. But that doesn't mean we should throw the p", "context": "", "use_case": "", "switched_from": "", "story": "Ask: Why does everything Microsoft create lately feel fragile and half-baked?"}, {"id": 749262752, "item_id": 46828922, "url": "https://news.ycombinator.com/item?id=46828922", "by": "jabroni_salad", "date": "2026-01-30", "stance": "neutral", "quote": "This location either uses the named locations I have set up in Entra", "excerpt": "Out of curiosity is this related to the 'emergency location' that we admins have to provide for every calling plan user or is it a wholly separate system? Reading the other comments here they must not realize that teams is already tracking their address because it has to know which PSAP to connect them to. This location either uses the named locations I have set up in Entra (we use our public IP ranges for it) or it ", "context": "Teams admin", "use_case": "emergency location for Teams calling", "switched_from": "", "story": "Microsoft Just Killed the \"Cover for Me\" Excuse: 365 Now Tracks You in Real-Time"}, {"id": 741090400, "item_id": 46318150, "url": "https://news.ycombinator.com/item?id=46318150", "by": "lucideng", "date": "2025-12-18", "stance": "recommend", "quote": "AD/Entra is pretty good in my experience working with it.", "excerpt": "AD/Entra is pretty good in my experience working with it. Self-hosting Entra is basically running a Windows Server + Domain Controller, or one of the alternatives you mentioned. Not something I would typically recommend to a customer unless they already had it running and were experienced in it. IMO, the best way to \"handle identity across Windows and Linux\" is Microsoft's own tools. You can join Windows, Mac, and Li", "context": "works with customers on IT", "use_case": "identity across Windows, Mac, Linux", "switched_from": "", "story": "Ask HN: Self-hosted AD/Entra ID alternative that works with Windows and Linux?"}]}