Keep admin sessions separate while allowing device-based Conditional Access checks.

Find and triage domain variants that could be used to impersonate your organization.

Lets see what we can do about minimizing passkey deployment issues with Compliance and App Protection Policy requirements :)