[{"data":1,"prerenderedAt":1400},["ShallowReactive",2],{"sc:header-data-da":3,"sc:footer-data-da":489,"post-da--posts-2026-09-22-end-of-mfa-sms-1986623a76fc6e":519,"authors_data":826,"content-da-list-7b291c2dd91a4":1179,"authors_data:Karsten Kleinschmidt":1397},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"da":13},{"title":14,"url":15,"alt":16},"Forside","/da","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"da":21},{"title":22,"description":23},"Workplace","Intelligente, sikre og fleksible arbejdspladser bygget på Microsoft 365, der forener moderne teknologier og identitetstjenester.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"da":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"da":34},{"title":35,"url":36},"Managed Intune","/da/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"da":40},{"title":41,"url":42},"Managed Entra","/da/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"da":46},{"title":47,"url":48},"Managed Workplace","/da/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"da":52},{"title":53,"url":54},"Consulting Services","/da/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"da":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"da":64},{"title":65,"url":66},"Microsoft Entra Suite","/da/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"da":70},{"title":71,"url":72},"Microsoft Intune","/da/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"da":76},{"title":77,"url":78},"Microsoft Windows","/da/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"da":82},{"title":83,"url":84},"Windows 365 Cloud PC","/da/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"da":88},{"title":89,"url":90},"Cloud Workplace Foundation","/da/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"da":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"da":100},{"title":101,"url":102},"Microsoft 365 Copilot","/da/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"da":106},{"title":107,"url":108},"Teams","/da/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"da":112},{"title":113,"url":114},"SharePoint & Power Platform","/da/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"da":118},{"title":119,"url":120},"Exchange Online","/da/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"da":124},{"title":125,"url":126},"Information Protection & Compliance","/da/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"da":130},{"title":131,"description":132},"Azure","Sæt gang i væksten med Azure: skær ned på cloudomkostningerne, øg effektiviteten og driv innovationen med IaaS og PaaS.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"da":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"da":142},{"title":143,"url":144},"Azure Managed Services","/da/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"da":148},{"title":149,"url":150},"Azure Consulting","/da/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"da":154},{"title":155},"Scenarier",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"da":160},{"title":161,"url":162},"Planlæg din cloud","/da/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"da":166},{"title":167,"url":168},"Migrér til cloud","/da/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"da":172},{"title":173,"url":174},"Forny din forretning","/da/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"da":178},{"title":179,"url":180},"Gentænk din VMware-strategi","/da/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"da":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"da":190},{"title":191,"url":192},"Azure Foundation","/da/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"da":196},{"title":197,"url":198},"Azure AI Foundation","/da/azure/azure-ai-foundation",{"name":86,"languages":200},{"da":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"da":205},{"title":206,"url":207},"Azure Data Foundation","/da/azure/azure-data-foundation",{"name":188,"languages":209},{"da":210},{"title":211,"url":212},"Azure Container Foundation","/da/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"da":216},{"title":217,"url":218},"Managed Dark Tenant","/da/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"da":222},{"title":223,"url":224},"Cloud Adoption Framework","/da/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"da":228},{"title":229,"url":230},"Cloud Competence Center","/da/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"da":234},{"title":235,"description":236,"emergency":237},"Sikkerhed","Årvågenhed i clouden med en prisbelønnet 24/7 managed service, incident response og tidssvarende beskyttelse af din infrastruktur.",{"text":238,"href":239,"skin":240,"icon":241},"Under angreb?","/da/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"da":249},{"title":250,"url":251},"Managed Red Tenant","/da/security/managed-red-tenant",{"name":214,"languages":253},{"da":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"da":259},{"title":260,"url":261},"Sentinel Data Lake","/da/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"da":265},{"title":266,"url":267},"Security Consulting","/da/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"da":274},{"title":275,"url":276},"Cloud Security Operations Center","/da/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"da":280},{"title":281,"url":282},"Global Secure Access","/da/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"da":286},{"title":287,"url":288},"MyWorkID","/da/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"da":295},{"title":296,"url":297},"Preventive Services","/da/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"da":301},{"title":302,"url":303},"Data Security Service","/da/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"da":307},{"title":308,"url":309},"Security Copilot Agents","/da/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"da":313},{"title":314,"url":315},"Implementering af NIS2","/da/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"da":319},{"title":320,"description":321},"Produkter","Companion-produkter til et gennemført sikkert, 100 % cloud-native Microsoft-miljø, der styrker samarbejdet, netværksautentificeringen og softwarehåndteringen.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"da":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","Cloudbaseret softwaredistribution",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"da":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","Certifikatdistribution fra clouden",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"da":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Arbejd med dine lokale Office 365-data",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"da":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","Migrér dine data fra én server til en anden",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"da":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Terraform Provider til Microsoft 365",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"da":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","Autentificering til dit netværk",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"da":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Find kontakter i Microsoft Teams",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"da":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilot-overvågning i realtid",{"name":396,"languages":397},"casestudies",{"da":398},{"title":399,"url":400,"description":401},"Cases","/da/casestudies","Pioner i clouden: din Microsoft-partner til gennemarbejdede cloudløsninger med en blueprint-baseret tilgang og ekspertise i Infrastructure-as-Code.",{"name":403,"languages":404,"children":407},"company",{"da":405},{"title":406,"description":401},"Virksomhed",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"da":411},{"title":412},"Om os",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"da":417},{"title":418,"url":419},"Fakta og tal","/da/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"da":423},{"title":424,"url":425},"Kontakt og lokationer","/da/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"da":429},{"title":430,"url":431},"glueckkanja Schweiz","/da/company/switzerland",{"name":433,"languages":434},"austria",{"da":435},{"title":436,"url":437},"glueckkanja Østrig","/da/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"da":441},{"title":442},"Karriere",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"da":447},{"title":448,"url":449},"Karriereoversigt","/da/career",{"name":451,"languages":452},"company-young-professionals",{"da":453},{"title":454,"url":455},"Young Professionals","/da/young-professionals",{"name":457,"languages":458},"company-jobs",{"da":459},{"title":460,"url":461},"Ledige stillinger","/da/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"da":465},{"title":466},"Aktuelt",[468,474],{"name":469,"languages":470},"company-blog",{"da":471},{"title":472,"url":473},"Blog","/da/blog",{"name":469,"languages":475},{"da":476},{"title":477,"url":478},"Events","/da/events",[480],{"name":481,"languages":482},"career-meta",{"da":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"da":487},{"title":488,"url":425,"active":484},"Kontakt",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksDa":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"Privatlivspolitik","/da/privacy",{"title":514,"url":515},"Juridisk information","/da/imprint",{"title":517,"url":518},"Ingen cookies","/da/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":780,"eventid":494,"extension":789,"hideInRecent":484,"layout":790,"meta":791,"moment":816,"navigation":325,"path":817,"seo":818,"stem":819,"tags":820,"webcast":484,"__hash__":825},"content_da/posts/2026-09-22-end-of-mfa-sms.md","Enden på MFA-SMS",[523],"Karsten Kleinschmidt",{"type":525,"value":526,"toc":779},"minimal",[527,532,536,557,561,621,631,638,641,644,647,650,653,657,659,662,665,668,671,674,678,680,683,686,689,693,695,698,705,710,737,740,743,749,753,755,758,767,771,773,776],[528,529,531],"h2",{"id":530},"tldr","TLDR",[533,534,535],"p",{},"{: .h3-font-size}",[537,538,540,541,540,545,540,548,540,551,540,554],"ul",{"style":539},"margin: 0.25rem 0","\n  ",[542,543,544],"li",{},"Microsoft lukker den 1. februar 2027 sin egen SMS- og opkaldstjeneste til multifaktor-autentificering i Entra ID.",[542,546,547],{},"Global Admins og eksterne gæster får en undtagelse indtil 1. juli 2027.",[542,549,550],{},"Siden den 1. september 2026 opfordrer Microsoft berørte brugere til at oprette en passkey som led i en registreringskampagne.",[542,552,553],{},"Berørt er ikke kun brugere, der aktivt bruger SMS, men også konti, hvor SMS eller telefonopkald stadig er tilladt eller registreret som metode. Også genoprettelsesprocesser som Self-Service Password Reset skal kontrolleres.",[542,555,556],{},"Virksomheder bør bruge den nødvendige migrering til at skifte til phishing-resistente metoder og systematisk reducere det resterende behov for passwords.",[558,559,560],"style",{},"\ntable {\n  font-family: arial, sans-serif;\n  border-collapse: collapse;\n  width: 100%;\n  background-color: #fff\n}\n\ntd, th {\n  border: 1px solid #dddddd;\n  text-align: left;\n  padding: 8px;\n}\n\ntr:nth-child(even) {\n  background-color: #dddddd;\n}\n\ntd:first-child, th:first-child {\n  white-space: nowrap;\n}\n",[562,563,564,577],"table",{},[565,566,567],"thead",{},[568,569,570,574],"tr",{},[571,572,573],"th",{},"Dato",[571,575,576],{},"Hvad der sker",[578,579,580,589,597,605,613],"tbody",{},[568,581,582,586],{},[583,584,585],"td",{},"1. september 2026",[583,587,588],{},"Passkeys aktiveres som yderligere metode for alle berørte brugere; registreringskampagnen står på »Microsoft managed«. Det genererer opfordringen til passkey-registrering ved login.",[568,590,591,594],{},[583,592,593],{},"18. september 2026",[583,595,596],{},"Alternative tredjepartsudbydere af SMS bliver synlige i Microsoft Security Store",[568,598,599,602],{},[583,600,601],{},"30. oktober 2026",[583,603,604],{},"Tredjeparts-SMS kan konfigureres via Security Store",[568,606,607,610],{},[583,608,609],{},"1. februar 2027",[583,611,612],{},"Microsofts egen SMS- og opkaldstjeneste ophører for de fleste brugere. Er der ingen anden egnet MFA-metode til rådighed, skal der registreres en passkey under login, før man kan fortsætte.",[568,614,615,618],{},[583,616,617],{},"1. juli 2027",[583,619,620],{},"Microsoft-SMS/Voice ophører for Global Administrators og eksterne gæster (B2B-guests).",[533,622,626,627],{"className":623,"style":625},[624],"font-size-1","grid-column: breakout; background-color: #fff; z-index: 1","Kilde: ",[628,629,630],"a",{"href":630},"https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sms-voice-retirement",[533,632,633,634,637],{},"Siden den 1. september 2026 har Microsoft aktiveret en registreringskampagne i tenants, som ved næste login opfordrer alle brugere, der er frigivet til SMS- eller opkalds-MFA, til at oprette en passkey. Brugeren kan indtil videre springe det over.",[635,636],"br",{},"\nDen automatiske registreringskampagne og passkey-aktivering kan midlertidigt undgås. Det ændrer intet ved lukningsdatoen for Microsofts egen SMS- og opkaldstjeneste.",[533,639,640],{},"Den 1. februar 2027 ophører Microsofts egen SMS- og opkaldstjeneste for almindelige brugere uden mulighed for opt-out. Brugerkonti, hvor udelukkende SMS eller telefonopkald er til rådighed som yderligere autentificeringsmetode, har brug for en alternativ metode inden skæringsdatoen. Ellers kan berørte brugere ikke gennemføre login, der kræver stærk autentificering.",[533,642,643],{},"Den 1. juli 2027 lukkes Microsoft-SMS/Voice så også for Global Administrators og eksterne gæster.",[533,645,646],{},"Som alternativer kommer især passkeys, Windows Hello for Business, FIDO2-sikkerhedsnøgler og, afhængigt af anvendelsesscenariet, andre egnede metoder i betragtning. Microsoft Authenticator med Number Matching øger beskyttelsen i forhold til SMS, men er ikke selv phishing-resistent.",[533,648,649],{},"Den, der af regulatoriske eller driftsmæssige grunde skal beholde SMS, kan fortsat gøre det via en teleudbyder fra Microsoft Security Store. Det er så en selvstændig aftale, og afregningen skal ske pr. besked. Udbyderne bliver synlige fra den 18. september, konfigurerbare er de fra den 30. oktober. Microsoft driver altså fremover ikke længere selv tjenesten, men overlader den til eksterne udbydere.",[533,651,652],{},"En detalje, der ofte bliver overset: Berørt er ikke den, der bruger SMS, men den, der er frigivet til det. Den, der i årevis har brugt Authenticator-appen, men stadig har et telefonnummer registreret som backup, er lige så berørt som personer, der hidtil regelmæssigt har ventet på tekstkoden. I de fleste tenants er det historisk et klart flertal. Og en ting mere er vigtig: Udfasningen vedrører ikke kun login. Ændringen vedrører også Self-Service Password Reset: SMS og telefonopkald er ikke længere til rådighed som Microsofts egen verifikationsmetode til det. Organisationer skal derfor kontrollere, hvilke alternative metoder der er tænkt til nulstilling af password og genoprettelse af konti.",[528,654,656],{"id":655},"hvorfor-microsoft-gør-det","Hvorfor Microsoft gør det",[533,658,535],{},[533,660,661],{},"Man kan læse den beslutning som formynderi. Man kan også læse den som det, den er: en indrømmelse af, at SMS ikke længere giver tilstrækkelig beskyttelse mod moderne realtids-phishing- og SIM-swap-angreb.",[533,663,664],{},"Det typiske angreb på en Microsoft 365-konto består i dag ikke længere i at gætte et password. I stedet lander brugeren på en loginside, der ligner den ægte til forveksling, og indtaster der sine loginoplysninger og MFA-koden. Angriberen bruger begge dele i realtid til login og får et session-token, som han overtager brugerens identitet med. Den slags værktøjer udbydes efterhånden som skalerbare angrebstjenester på darknettet. Automatisering og AI sænker desuden indsatsen ved troværdige phishing-kampagner.",[533,666,667],{},"Phishing-resistente metoder som passkeys bruger en anden fremgangsmåde. En passkey er fast knyttet til den webadresse, den blev oprettet til, og kan ikke bruges på et forfalsket website. Også raffinerede angreb, hvor bedragere ubemærket sender loginforsøget videre til den ægte side, løber ud i det tomme: Browseren opdager, at den ikke befinder sig på den rigtige adresse, og tilbyder slet ikke passkeyen. Selv hvis et svar nåede frem til den ægte tjeneste, ville den forkerte adresse stå i det på en forfalskningssikker måde, og tjenesten ville afvise det. Kontrollen ligger dermed ikke længere hos mennesket, men hos teknikken, sikret med kryptografi. Brugerne skal ikke længere selv gennemskue, om et website er ægte. Det adskiller passkeys fra passwords og klassisk tofaktor-login.\nWindows Hello for Business, FIDO2-sikkerhedsnøgler og passkeys i Microsoft Authenticator bruger sammenlignelige phishing-resistente principper. For drift og brugerførelse er de dog ikke identiske: enhedsbinding, synkronisering, genoprettelse og understøttede platforme er forskellige og skal vurderes pr. persona. Teknikken har eksisteret i årevis. Det nye er, at Microsoft nu gør den til standard.",[533,669,670],{},"Bankerne gik i øvrigt den vej allerede for nogle år siden. SMS-TAN, længe den mest udbredte godkendelsesmetode i netbank, har de fleste institutter frivilligt afskaffet og erstattet med enheds- eller transaktionsbundne metoder som pushTAN, photoTAN og chipTAN. Den tekniske implementering er forskellig, men målet er det samme: Godkendelser skal bindes stærkere til en registreret enhed og til den konkrete handling. Grundene minder om dagens: SIM-swapping, opsnappede beskeder og realtids-phishing.",[533,672,673],{},"For organisationer under NIS2, DORA eller ISO 27001 bliver det stadig sværere at begrunde svage autentificeringsmetoder som passende. Phishing-resistente metoder styrker derfor ikke kun den tekniske sikkerhed, men også dokumentationsevnen over for ledelse, revision og tilsyn.",[528,675,677],{"id":676},"kan-man-afskaffe-passwordet","Kan man afskaffe passwordet?",[533,679,535],{},[533,681,682],{},"Den, der i forbindelse med omstillingen alligevel inventerer autentificeringsmetoder, informerer brugere og indfører nye loginmetoder, bør samtidig undersøge, hvor passwords stadig faktisk er nødvendige. En passkey kan ved understøttede applikationer erstatte både password og anden faktor. I kombination med Windows Hello for Business på den bærbare og en passkey i Microsoft Authenticator er passwordløst login til gængse Microsoft-tjenester muligt og, ved en egnet konfiguration, også adgang til lokale Active Directory-ressourcer.",[533,684,685],{},"Også onboarding af nye medarbejdere kan indrettes tilsvarende. I stedet for et initialpassword kan der bruges et tidsbegrænset Temporary Access Pass, som Entra ID anerkender som fuldgyldig MFA- og loginmetode. Med det sker det første login på den enhed, der er udrullet via Autopilot. Derefter opsættes Windows Hello og en passkey. Efter at Temporary Access Pass er udløbet, kræves der ikke længere et password til det almindelige login.",[533,687,688],{},"I målbilledet skal medarbejderne hverken kende eller indtaste deres password i den almindelige arbejdsdag. Dermed falder phishing-risici og behovet for nulstilling af passwords markant.",[528,690,692],{"id":691},"hvor-det-halter-i-praksis","Hvor det halter i praksis",[533,694,535],{},[533,696,697],{},"glueckkanja følger den slags omstillinger regelmæssigt. Vanskelighederne ligger sjældent i teknologien. De ligger i detaljerne i implementeringen.",[533,699,700,704],{},[701,702,703],"b",{},"Aktiveret er ikke gennemtvunget."," Den blotte frigivelse af passkeys sikrer ikke, at de bliver brugt ved hvert relevant login. Også »System-preferred MFA« prioriterer kun den stærkeste tilgængelige metode, men gennemtvinger ikke et bindende adgangskrav. Skal en ressource udelukkende kunne nås med phishing-resistent autentificering, skal det håndhæves via en passende Authentication Strength i Conditional Access. Ellers kan der fortsat tilbydes svagere fallback-metoder. Passkeyen ville så kun være »dekoration«.",[533,706,709],{"className":707},[708],"mb-n6","Et realistisk forløb følger fire trin:",[711,712,713,719,725,731],"ol",{},[542,714,715,718],{},[701,716,717],{},"Inventering."," Hvem er frigivet til SMS og telefonopkald? Hvem har et telefonnummer registreret, og hvem har sidst faktisk brugt det? Er tenanten migreret til den nye politik for autentificeringsmetoder? Hvilke gæstebrugere findes der, har de deres egne tenants?",[542,720,721,724],{},[701,722,723],{},"Persona-beslutning."," Hvilken passkey-profil (device-bound eller synced) passer til hvilken brugergruppe, og hvilke Conditional Access-politikker med Authentication Strength håndhæver den bindende? Hvordan håndterer man shared devices og eksterne brugere? Hvad gør medarbejdere uden smartphone? Vil man stole på partnervirksomheder med gæstebrugere for MFA?",[542,726,727,730],{},[701,728,729],{},"Pilot og kampagne."," Først afprøves omstillingen med en pilotgruppe. Derefter følger en registreringskampagne med ledsagende kommunikation og begrænset udsættelse. En god forberedelse af brugerne reducerer opfølgende spørgsmål og undgår ekstra belastning af servicedesken.\nUndtagelser skal have en udløbsdato før den 1.2.27.",[542,732,733,736],{},[701,734,735],{},"Lukning."," Først efter registreringskampagnens afslutning fjernes telefonnumre som MFA-metode, og SMS deaktiveres i politikken. Lukningen sker bevidst før Microsofts skæringsdato, så det kan sikres, at ingen brugere længere er berørt.",[533,738,739],{},"Noget særligt gælder for B2B-gæster: For eksterne brugere gælder andre registrerings- og tillidsmodeller end for interne konti. Kontrollér, om MFA fra home-tenanten kan etableres via Cross-Tenant Access Settings, og hvilket alternativ der er tænkt til gæster uden egen Entra-tenant. Pr. 19. september 2026 planlægger Microsoft at stille passkey-understøttelse til rådighed for interne gæstebrugere inden oktober. Det hyppigere tilfælde med eksterne gæster (B2B) får understøttelse for passkey senere, og datoen bliver offentliggjort senere. Formodentlig for at vinde lidt mere tid blev tilgængeligheden af SMS og telefonopkald for eksterne gæster forlænget til juli 2027.",[533,741,742],{},"Indtil da skal der planlægges egnede overgangsmetoder eller tillidsbaserede cross-tenant-scenarier.",[533,744,745,748],{},[701,746,747],{},"Hvad passkeys ikke løser:"," Phishing-resistent login beskytter selve autentificeringen, ikke automatisk enhver allerede eksisterende session. Skadelig software, kompromitterede browsere eller stjålne session-tokens er fortsat relevante risici. Derfor bør Authentication Strength, enhedskonformitet, endpoint-beskyttelse, risikobaserede adgangsbeslutninger og egnede sessionskontroller planlægges samlet. Sådan kan risikoen reduceres, og, hvis enhedskonformitet kræves bindende, adgangen begrænses til tilsvarende administrerede enheder.",[528,750,752],{"id":751},"sådan-griber-vi-det-an","Sådan griber vi det an",[533,754,535],{},[533,756,757],{},"Hos glueckkanja betragter vi identitet og enhed som ét fælles kontrolsystem. Politikker for autentificeringsmetoder, passkey-profiler, Authentication Strengths, Conditional Access og Intune bliver defineret sporbart, versioneret og udrullet automatiseret efter principperne i Infrastructure as Code (IaC). Sådan kan måltilstand og afvigelser dokumenteres, og ændringer påvises versioneret. Det skaber et solidt grundlag for drift, ledelse og audits, uden at man skal rekonstruere tilstanden manuelt i portaler.",[533,759,760,761,763,764,766],{},"Denne fremgangsmåde er en del af vores services ",[628,762,41],{"href":42}," og ",[628,765,35],{"href":36},". De kombinerer tekniske blueprints, løbende tilpasning og sporbar konfiguration.",[528,768,770],{"id":769},"konklusion","Konklusion",[533,772,535],{},[533,774,775],{},"Set på den måde er SMS-lukningen ikke en irritation, men en velkommen anledning. Den tvinger til en inventering, der for længst var påkrævet. Og den åbner døren til en identitet, hvor det svageste led ikke længere forekommer: passwordet i hovedet på et menneske.",[533,777,778],{},"Vil I vide, hvor jeres tenant står i dag, gennemfører vi gerne et første assessment hos jer. Kontakt os!",{"title":780,"searchDepth":781,"depth":781,"links":782},"",2,[783,784,785,786,787,788],{"id":530,"depth":781,"text":531},{"id":655,"depth":781,"text":656},{"id":676,"depth":781,"text":677},{"id":691,"depth":781,"text":692},{"id":751,"depth":781,"text":752},{"id":769,"depth":781,"text":770},"md","post",{"lang":792,"seoTitle":793,"titleClass":794,"date":795,"categories":796,"blogtitlepic":798,"socialimg":799,"customExcerpt":800,"keywords":801,"asideNav":802,"maxContent":484,"published":325},"da","Enden på MFA-SMS: Hvorfor virksomheder nu bør skifte til phishing-resistente og så vidt muligt passwordløse loginmetoder.","h2-font-size","2026-09-21",[797],"Security","head-conditional-access.jpg","/blog/heads/head-conditional-access.jpg","Hvorfor virksomheder nu bør skifte til phishing-resistente og så vidt muligt passwordløse loginmetoder.","Entra ID SMS-lukning, MFA SMS slut, phishing-resistent MFA, Passkeys, FIDO2, Windows Hello for Business, Temporary Access Pass, Authentication Strength, Conditional Access, Self-Service Password Reset, passwordløst login, Microsoft Security Store",{"menuItems":803},[804,806,808,810,812,814],{"href":805,"text":531},"#tldr",{"href":807,"text":656},"#hvorfor-microsoft-gør-det",{"href":809,"text":677},"#kan-man-afskaffe-passwordet",{"href":811,"text":692},"#hvor-det-halter-i-praksis",{"href":813,"text":752},"#sådan-griber-vi-det-an",{"href":815,"text":770},"#konklusion","2026-09-22","/posts/2026-09-22-end-of-mfa-sms",{"title":521,"description":780},"posts/2026-09-22-end-of-mfa-sms",[797,821,822,823,824],"Authentication","Microsoft Entra ID","MFA","Passkeys","TMOqFurqGk6wD8iIyiuPxhQtH750dgDaJ9jjxR2KKxw",{"id":827,"extension":828,"meta":829,"stem":8,"__hash__":1178},"authors_data/authors.json","json",{"path":830,"Fritz Zurhorst":831,"Alexander Schlindwein":837,"Sophie Luna":843,"Nadine Klein":851,"Karsten Kleinschmidt":857,"Julian Wendt":864,"Holger Bunkradt":869,"Ralf Mania":875,"Oliver Kieselbach":881,"Steffen Schwerdtfeger":887,"Gunnar Winter":895,"Jan Petersen":900,"Thorsten Kunzi":905,"Moritz Pohl":909,"Thorben Pöschus":914,"Christoph Hannebauer":920,"Marco Scheel":924,"Christopher Brumm":929,"Florian Klante":936,"Niklas Bachmann":941,"Nils Krautkrämer":946,"Patrick Treptau":952,"Peter Beckendorf":957,"Patrick Sobau":962,"Jörg Wunderlich":967,"Michael Breither":971,"Christian Kanja":976,"Zeba Hoffmann":982,"Jochen Fröhlich":987,"Jan Geisbauer":991,"Gerrit Reinke":1002,"Christian Kordel":1008,"Stephan Wälde":1012,"Carolin Kanja":1017,"Adrian Ritter":1023,"Marvin Bangert":1028,"Thorsten Pickhan":1034,"Christian Lorenz":1040,"Denis Böhm":1045,"Fabian Bader":1050,"Juan Jose Fernandez Perez":1056,"Mahschid Sayyar":1061,"Benjamin Dassow":1066,"Markus Walschburger":1071,"Jonathan Haist":1076,"Daniel Rohregger":1081,"Thomas Naunheim":1086,"Florian Stöckl":1091,"Pascal Asch":1096,"Markus Kättner":1101,"Anna Ulbricht":1108,"Annette Brauns":1115,"body":1121,"title":1177},"/authors",{"display_name":832,"avatar":833,"permalink":834,"linkedin":835,"imageOffsetTop":836},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":838,"avatar":839,"permalink":840,"twitter":841,"linkedin":842},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":844,"avatar":845,"permalink":846,"twitter":847,"linkedin":848,"imageOffsetLeft":849,"imageOffsetTop":850},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":852,"avatar":853,"permalink":854,"twitter":855,"linkedin":856,"imageOffsetTop":836},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":523,"avatar":858,"permalink":859,"twitter":860,"linkedin":861,"imageOffsetTop":862,"imageOffsetLeft":863},"/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":865,"avatar":866,"permalink":867,"linkedin":868},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":870,"avatar":871,"permalink":872,"linkedin":873,"twitter":874},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":876,"avatar":877,"permalink":878,"linkedin":879,"twitter":880},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":882,"avatar":883,"permalink":884,"linkedin":885,"twitter":886},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":888,"avatar":889,"permalink":890,"linkedin":891,"twitter":892,"imageOffsetTop":893,"imageOffsetLeft":894},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":896,"avatar":897,"permalink":898,"twitter":847,"linkedin":899},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":901,"avatar":902,"permalink":903,"twitter":847,"linkedin":904},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":906,"avatar":907,"permalink":908,"twitter":847,"linkedin":899,"imageOffsetTop":836},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":910,"avatar":911,"permalink":912,"twitter":847,"linkedin":913},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":915,"avatar":916,"permalink":917,"twitter":918,"linkedin":919},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":921,"avatar":922,"permalink":923,"twitter":847,"linkedin":899,"imageOffsetTop":836},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":925,"avatar":926,"permalink":927,"twitter":928,"linkedin":928},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":930,"avatar":931,"permalink":932,"twitter":933,"linkedin":934,"imageOffsetTop":935},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":937,"avatar":938,"permalink":939,"linkedin":940,"twitter":847},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":942,"avatar":943,"permalink":944,"linkedin":945,"twitter":847},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":947,"avatar":948,"permalink":949,"twitter":950,"linkedin":951},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":953,"avatar":954,"permalink":955,"linkedin":956,"twitter":847},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":958,"avatar":959,"permalink":960,"linkedin":961,"twitter":847,"imageOffsetTop":836},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":963,"avatar":964,"permalink":965,"linkedin":966,"twitter":847},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":968,"avatar":969,"permalink":970,"twitter":847},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":972,"avatar":973,"permalink":974,"twitter":847,"linkedin":975},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":977,"avatar":978,"permalink":979,"twitter":980,"linkedin":981},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":983,"avatar":984,"permalink":985,"linkedin":986,"twitter":847},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":988,"avatar":989,"permalink":990,"twitter":847,"linkedin":899},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":992,"avatar":993,"permalink":994,"twitter":995,"linkedin":995,"imageOffsetTop":836,"socials":996},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[997,999],{"text":472,"href":998},"https://emptydc.com",{"text":1000,"href":1001},"Podcast","https://hairlessinthecloud.com",{"display_name":1003,"avatar":1004,"permalink":1005,"twitter":1006,"linkedin":1007},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1009,"avatar":1010,"permalink":1011,"twitter":847,"linkedin":899},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1013,"avatar":1014,"permalink":1015,"twitter":1016,"linkedin":899},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1018,"avatar":1019,"permalink":1020,"twitter":1021,"linkedin":1022},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1024,"avatar":1025,"permalink":1026,"twitter":1027,"linkedin":1027},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1029,"avatar":1030,"permalink":1031,"twitter":1032,"linkedin":1033},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1035,"avatar":1036,"permalink":1037,"twitter":1038,"linkedin":1039},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1041,"avatar":1042,"permalink":1043,"linkedin":1044,"twitter":847},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1046,"avatar":1047,"permalink":1048,"linkedin":1049,"twitter":847},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1051,"avatar":1052,"permalink":1053,"linkedin":1054,"twitter":1055},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1057,"avatar":1058,"permalink":1059,"linkedin":1060},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1062,"avatar":1063,"permalink":1064,"linkedin":1065},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1067,"avatar":1068,"permalink":1069,"linkedin":1070},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1072,"avatar":1073,"permalink":1074,"linkedin":1075},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1077,"avatar":1078,"permalink":1079,"linkedin":1080,"imageOffsetTop":836},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1082,"avatar":1083,"permalink":1084,"linkedin":1085,"imageOffsetTop":836},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1087,"avatar":1088,"permalink":1089,"linkedin":1090,"imageOffsetTop":935},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1092,"avatar":1093,"permalink":1094,"linkedin":1095,"imageOffsetTop":935},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1097,"avatar":1098,"permalink":1099,"linkedin":1100,"imageOffsetTop":935},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1102,"avatar":1103,"permalink":1104,"linkedin":1105,"imageOffsetTop":1106,"imageOffsetLeft":1107},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1109,"avatar":1110,"permalink":1111,"linkedin":1112,"imageOffsetTop":1113,"imageOffsetLeft":1114},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1116,"avatar":1117,"permalink":1118,"linkedin":1119,"imageOffsetTop":1120,"imageOffsetLeft":862},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1122,"Alexander Schlindwein":1123,"Sophie Luna":1124,"Nadine Klein":1125,"Karsten Kleinschmidt":1126,"Julian Wendt":1127,"Holger Bunkradt":1128,"Ralf Mania":1129,"Oliver Kieselbach":1130,"Steffen Schwerdtfeger":1131,"Gunnar Winter":1132,"Jan Petersen":1133,"Thorsten Kunzi":1134,"Moritz Pohl":1135,"Thorben Pöschus":1136,"Christoph Hannebauer":1137,"Marco Scheel":1138,"Christopher Brumm":1139,"Florian Klante":1140,"Niklas Bachmann":1141,"Nils Krautkrämer":1142,"Patrick Treptau":1143,"Peter Beckendorf":1144,"Patrick Sobau":1145,"Jörg Wunderlich":1146,"Michael Breither":1147,"Christian Kanja":1148,"Zeba Hoffmann":1149,"Jochen Fröhlich":1150,"Jan Geisbauer":1151,"Gerrit Reinke":1155,"Christian Kordel":1156,"Stephan Wälde":1157,"Carolin Kanja":1158,"Adrian Ritter":1159,"Marvin Bangert":1160,"Thorsten Pickhan":1161,"Christian Lorenz":1162,"Denis Böhm":1163,"Fabian Bader":1164,"Juan Jose Fernandez Perez":1165,"Mahschid Sayyar":1166,"Benjamin Dassow":1167,"Markus Walschburger":1168,"Jonathan Haist":1169,"Daniel Rohregger":1170,"Thomas Naunheim":1171,"Florian Stöckl":1172,"Pascal Asch":1173,"Markus Kättner":1174,"Anna Ulbricht":1175,"Annette Brauns":1176},{"display_name":832,"avatar":833,"permalink":834,"linkedin":835,"imageOffsetTop":836},{"display_name":838,"avatar":839,"permalink":840,"twitter":841,"linkedin":842},{"display_name":844,"avatar":845,"permalink":846,"twitter":847,"linkedin":848,"imageOffsetLeft":849,"imageOffsetTop":850},{"display_name":852,"avatar":853,"permalink":854,"twitter":855,"linkedin":856,"imageOffsetTop":836},{"display_name":523,"avatar":858,"permalink":859,"twitter":860,"linkedin":861,"imageOffsetTop":862,"imageOffsetLeft":863},{"display_name":865,"avatar":866,"permalink":867,"linkedin":868},{"display_name":870,"avatar":871,"permalink":872,"linkedin":873,"twitter":874},{"display_name":876,"avatar":877,"permalink":878,"linkedin":879,"twitter":880},{"display_name":882,"avatar":883,"permalink":884,"linkedin":885,"twitter":886},{"display_name":888,"avatar":889,"permalink":890,"linkedin":891,"twitter":892,"imageOffsetTop":893,"imageOffsetLeft":894},{"display_name":896,"avatar":897,"permalink":898,"twitter":847,"linkedin":899},{"display_name":901,"avatar":902,"permalink":903,"twitter":847,"linkedin":904},{"display_name":906,"avatar":907,"permalink":908,"twitter":847,"linkedin":899,"imageOffsetTop":836},{"display_name":910,"avatar":911,"permalink":912,"twitter":847,"linkedin":913},{"display_name":915,"avatar":916,"permalink":917,"twitter":918,"linkedin":919},{"display_name":921,"avatar":922,"permalink":923,"twitter":847,"linkedin":899,"imageOffsetTop":836},{"display_name":925,"avatar":926,"permalink":927,"twitter":928,"linkedin":928},{"display_name":930,"avatar":931,"permalink":932,"twitter":933,"linkedin":934,"imageOffsetTop":935},{"display_name":937,"avatar":938,"permalink":939,"linkedin":940,"twitter":847},{"display_name":942,"avatar":943,"permalink":944,"linkedin":945,"twitter":847},{"display_name":947,"avatar":948,"permalink":949,"twitter":950,"linkedin":951},{"display_name":953,"avatar":954,"permalink":955,"linkedin":956,"twitter":847},{"display_name":958,"avatar":959,"permalink":960,"linkedin":961,"twitter":847,"imageOffsetTop":836},{"display_name":963,"avatar":964,"permalink":965,"linkedin":966,"twitter":847},{"display_name":968,"avatar":969,"permalink":970,"twitter":847},{"display_name":972,"avatar":973,"permalink":974,"twitter":847,"linkedin":975},{"display_name":977,"avatar":978,"permalink":979,"twitter":980,"linkedin":981},{"display_name":983,"avatar":984,"permalink":985,"linkedin":986,"twitter":847},{"display_name":988,"avatar":989,"permalink":990,"twitter":847,"linkedin":899},{"display_name":992,"avatar":993,"permalink":994,"twitter":995,"linkedin":995,"imageOffsetTop":836,"socials":1152},[1153,1154],{"text":472,"href":998},{"text":1000,"href":1001},{"display_name":1003,"avatar":1004,"permalink":1005,"twitter":1006,"linkedin":1007},{"display_name":1009,"avatar":1010,"permalink":1011,"twitter":847,"linkedin":899},{"display_name":1013,"avatar":1014,"permalink":1015,"twitter":1016,"linkedin":899},{"display_name":1018,"avatar":1019,"permalink":1020,"twitter":1021,"linkedin":1022},{"display_name":1024,"avatar":1025,"permalink":1026,"twitter":1027,"linkedin":1027},{"display_name":1029,"avatar":1030,"permalink":1031,"twitter":1032,"linkedin":1033},{"display_name":1035,"avatar":1036,"permalink":1037,"twitter":1038,"linkedin":1039},{"display_name":1041,"avatar":1042,"permalink":1043,"linkedin":1044,"twitter":847},{"display_name":1046,"avatar":1047,"permalink":1048,"linkedin":1049,"twitter":847},{"display_name":1051,"avatar":1052,"permalink":1053,"linkedin":1054,"twitter":1055},{"display_name":1057,"avatar":1058,"permalink":1059,"linkedin":1060},{"display_name":1062,"avatar":1063,"permalink":1064,"linkedin":1065},{"display_name":1067,"avatar":1068,"permalink":1069,"linkedin":1070},{"display_name":1072,"avatar":1073,"permalink":1074,"linkedin":1075},{"display_name":1077,"avatar":1078,"permalink":1079,"linkedin":1080,"imageOffsetTop":836},{"display_name":1082,"avatar":1083,"permalink":1084,"linkedin":1085,"imageOffsetTop":836},{"display_name":1087,"avatar":1088,"permalink":1089,"linkedin":1090,"imageOffsetTop":935},{"display_name":1092,"avatar":1093,"permalink":1094,"linkedin":1095,"imageOffsetTop":935},{"display_name":1097,"avatar":1098,"permalink":1099,"linkedin":1100,"imageOffsetTop":935},{"display_name":1102,"avatar":1103,"permalink":1104,"linkedin":1105,"imageOffsetTop":1106,"imageOffsetLeft":1107},{"display_name":1109,"avatar":1110,"permalink":1111,"linkedin":1112,"imageOffsetTop":1113,"imageOffsetLeft":1114},{"display_name":1116,"avatar":1117,"permalink":1118,"linkedin":1119,"imageOffsetTop":1120,"imageOffsetLeft":862},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1180,"authors":1384},[1181,1186,1200,1214,1230,1243,1256,1269,1281,1297,1311,1326,1344,1355,1368],{"id":520,"title":521,"author":1182,"cta":494,"description":780,"hideInRecent":484,"layout":790,"meta":1183,"moment":816,"path":817,"stem":819,"tags":1185,"webcast":484},[523],{"lang":792,"date":795,"categories":1184,"blogtitlepic":798,"customExcerpt":800},[797],[797,821,822,823,824],{"id":1187,"title":1188,"author":1189,"cta":494,"description":780,"hideInRecent":484,"layout":790,"meta":1190,"moment":795,"path":1194,"stem":1195,"tags":1196,"webcast":484},"content_da/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. Når brugeren er exploiten, og hvordan I stopper det",[832,852],{"lang":792,"date":795,"categories":1191,"blogtitlepic":1192,"customExcerpt":1193},[797],"head-clickfix.jpg","ClickFix gør brugere til deres egen angriber: et falsk CAPTCHA, en copy-paste, og skadekoden kører i hukommelsen, uden at noget lander på disken. Hvordan Microsoft Defender opdager angrebet, hvor detektionen når sine grænser, og hvordan I lukker hullet med et RunMRU-hunt og fire beskyttelseslag.","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1197,1198,1199],"Defender","SOC","Endpoint Security",{"id":1201,"title":1202,"author":1203,"cta":494,"description":780,"hideInRecent":484,"layout":790,"meta":1204,"moment":795,"path":1208,"stem":1209,"tags":1210,"webcast":484},"content_da/posts/2026-09-21-red-tenant-dark-tenant-cio.md","Admin og hverdag på samme computer? Game Over.",[992],{"lang":792,"date":795,"categories":1205,"blogtitlepic":1206,"customExcerpt":1207},[797],"head-game-over-en.jpg","Hvorfor én tenant ikke rækker for CIO'er, og hvorfor den anden sjældent bliver tænkt med. Managed Red Tenant adskiller arkitektonisk det administrative arbejde fra kontormiljøet, Managed Dark Tenant holder virksomheden handlekraftig, hvis forsvaret alligevel falder. Hvad det betyder for driftsmodellen, SOC-signalet og dokumentationspligterne efter NISG 2026.","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[797,1211,1212,1213],"Privileged Access","Zero Trust","NIS2",{"id":1215,"title":1216,"author":1217,"cta":494,"description":1218,"hideInRecent":484,"layout":790,"meta":1219,"moment":1220,"path":1225,"stem":1226,"tags":1227,"webcast":484},"content_da/posts/2026-08-08-isg-germany-2026.md","Fire gange Leader. glueckkanja i ISG-undersøgelsen Tyskland 2026",[1018],"ISG har omdøbt sin undersøgelse i år. Microsoft Cloud Ecosystem blev til Microsoft AI and Cloud Ecosystem, og med navnet har målestokken flyttet sig: Det, der vurderes, er ikke længere, hvem der indfører Microsoft-platforme, men hvem der driver Copilot, agenter og AI-workloads kontrollerbart. Den nye målestok har ikke ændret noget ved vores position. ISG Provider Lens®-undersøgelsen Tyskland 2026 positionerer os som Leader i fire kvadranter: Microsoft Productivity and Business Process Services og Azure Managed Services, hver gang i både Large Market og Mid Market. Efter 2021, 2023, 2024 og 2025 er det den femte Leader-placering i Tyskland, i Schweiz kom springet ind i Leader-kvadranten to uger tidligere.",{"lang":792,"date":1220,"categories":1221,"blogtitlepic":1223,"customExcerpt":1224},"2026-08-08",[1222],"Corporate","head-isg-de-2026.png","ISG Provider Lens®-undersøgelsen 2026 positionerer glueckkanja i Tyskland som Leader i fire kvadranter: Microsoft Productivity and Business Process Services og Azure Managed Services, hver gang i både Large og Mid Market. Undersøgelsen hedder nu Microsoft AI and Cloud Ecosystem, og målestokken har flyttet sig: Det, der vurderes, er, hvem der driver AI- og agent-workloads kontrollerbart.","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1228,1229],"Award","ISG",{"id":1231,"title":1232,"author":1233,"cta":494,"description":1234,"hideInRecent":484,"layout":790,"meta":1235,"moment":1236,"path":1240,"stem":1241,"tags":1242,"webcast":484},"content_da/posts/2026-07-31-isg-switzerland-2026.md","Fra Rising Star til Leader. glueckkanja i ISG-undersøgelsen Schweiz 2026",[1018],"I 2024 stiftede vi glueckkanja Switzerland AG og flyttede ind i et kontor i zentroom på Bahnhofplatz 10b i Bern. I 2025 placerede ISG os som Rising Star på det schweiziske marked, som den leverandør, analytikerne tror kan tage springet ind i Leader-kvadranten. Nu er springet dokumenteret: ISG Provider Lens®-undersøgelsen 2026 positionerer os i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inden for områderne Azure Managed Services og Microsoft Productivity and Business Process Services.",{"lang":792,"date":1236,"categories":1237,"blogtitlepic":1238,"customExcerpt":1239},"2026-07-31",[1222],"head-isg-ch-2026.png","ISG Provider Lens®-undersøgelsen 2026 positionerer glueckkanja i Schweiz som Leader i kvadranten Microsoft AI and Cloud Ecosystem, inden for områderne Azure Managed Services og Microsoft Productivity and Business Process Services. To år efter markedsindtrædelsen i Bern, et år efter Rising Star-udmærkelsen.","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1228,1229],{"id":1244,"title":1245,"author":1246,"cta":494,"description":780,"hideInRecent":484,"layout":790,"meta":1247,"moment":1248,"path":1252,"stem":1253,"tags":1254,"webcast":484},"content_da/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. Hvad OpenAI/Hugging-Face-hændelsen afslører, og hvad den ikke gør",[992],{"lang":792,"date":1248,"categories":1249,"blogtitlepic":1250,"customExcerpt":1251},"2026-07-24",[797],"head-outbreak.jpg","En AI-agent bryder ud af sit testmiljø, finder en zero-day og hacker en anden virksomhed. Det lyder som et filmmanuskript, men skete faktisk i juli 2026. Tid til en nøgtern placering: med lidt psykologi, to security-veteraner og spørgsmålet om, hvad det betyder for jeres forsvar.","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1255,1198,1212],"AI",{"id":1257,"title":1258,"author":1259,"cta":494,"description":1260,"hideInRecent":484,"layout":790,"meta":1261,"moment":1262,"path":1266,"stem":1267,"tags":1268,"webcast":484},"content_da/posts/2026-07-22-isg-cybersecurity-2026.md","Leader og Rising Star. glueckkanja i ISG's Cybersecurity-undersøgelse 2026",[1018],"Ny i kvadranten og straks Leader: ISG Provider Lens®-undersøgelsen \"Cybersecurity – Services and Solutions 2026\" positionerer glueckkanja som Leader inden for Next-Gen SOC/MDR Services for mellemstore virksomheder i Tyskland. I det samlede marked for Next-Gen SOC/MDR Services udnævner ISG os til Rising Star, altså den leverandør, som analytikerne tror kan tage springet ind i Leader-kvadranten inden for de næste 12 til 24 måneder.",{"lang":792,"date":1262,"categories":1263,"blogtitlepic":1264,"customExcerpt":1265},"2026-07-22",[1222],"head-isg-cybersecurity-2026.png","ISG Provider Lens®-undersøgelsen Cybersecurity 2026 udnævner glueckkanja til Leader i kvadranten Next-Gen SOC/MDR Services (Midmarket). I det samlede marked for Next-Gen SOC/MDR Services er vi Rising Star. ISG fremhæver vores vækst over gennemsnittet, vores dybe Microsoft-security-ekspertise og et 24/7-SOC drevet fra Tyskland.","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1228,1229,797],{"id":1270,"title":1271,"author":1272,"cta":494,"description":1273,"hideInRecent":484,"layout":790,"meta":1274,"moment":1275,"path":1278,"stem":1279,"tags":1280,"webcast":484},"content_da/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: Hvad AI virkelig skal have for at kunne arbejde",[1018],"En produktionsvirksomhed vil vide, hvilke af dens 14.000 SKU'er der faktisk er profitable. Svaret ligger i tre systemer, der aldrig har udvekslet et enkelt datapunkt med hinanden. Indtil for kort tid siden kostede det tre afdelinger, to uger og en del god vilje at få det. Siden begyndelsen af 2026 kan en AI besvare det spørgsmål på minutter: søge data igennem, skabe sammenhænge, producere en anbefaling. Forudsat at den har adgang.",{"lang":792,"date":1275,"categories":1276,"blogtitlepic":1277},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1255,131],{"id":1282,"title":1283,"author":1284,"cta":494,"description":1285,"hideInRecent":484,"layout":790,"meta":1286,"moment":1287,"path":1291,"stem":1292,"tags":1293,"webcast":484},"content_da/posts/2026-07-01-onboarding-process.md","Kontrakten er skrevet under: Sådan forløber din onboarding hos os",[1109],"Hvordan forløber jeres onboarding egentlig? Det er et spørgsmål, vi støder på igen og igen i samtaler med ansøgere, for mange har oplevet, at en onboarding kan gå hakkende. Derfor er det så meget desto vigtigere for os, at du får en god fornemmelse helt fra begyndelsen.",{"lang":792,"date":1287,"categories":1288,"blogtitlepic":1289,"customExcerpt":1290},"2026-07-01",[1222],"Onboarding_Blogheader","Kontrakten er skrevet under, det første store skridt er taget. Men hvad sker der nu? Vi tager dig med bag kulisserne i vores onboarding, fra PreBoarding til den første uge i teamet.","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1294,1295,1296],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1298,"title":1299,"author":1300,"cta":494,"description":1301,"hideInRecent":484,"layout":790,"meta":1302,"moment":1303,"path":1307,"stem":1308,"tags":1309,"webcast":484},"content_da/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: vi er blandt de få",[1018],"I Microsofts partner-økosystem findes der en lang række anerkendelser, og alligevel skiller Frontier Partner Badge sig ud fra de øvrige udmærkelser i sin anlæg. Man kan ikke ansøge om det, det tildeles på Microsofts eget initiativ til en eksklusiv kreds af partnere, som skal overbevise i flere discipliner parallelt i stedet for at brillere i en enkelt. Microsoft vurderer dokumenteret kompetence inden for Cloud & AI Platforms, AI Business Solutions og Security i lige høj grad og henvender sig dermed til virksomheder, der ikke opfatter AI som en påbygning på eksisterende IT, men som resultatet af en gennemgående arkitektur, der bærer fra identiteten over endpointet og helt ind i produktiv AI-drift.",{"lang":792,"date":1303,"categories":1304,"blogtitlepic":1305,"customExcerpt":1306},"2026-06-26",[1222],"head-frontier-partner-badge.jpg","Microsoft AI Cloud Partner Program har for nylig fået en ny topudmærkelse, Frontier Partner Badge. Microsoft tildeler den udelukkende til en eksklusiv kreds af partnere verden over, som leverer bæredygtige AI-projekter på hele Microsoft-stakken, fra arbejdspladsen over cloud-platformen og security og helt ind i selve AI-anvendelsen, og som har dokumenteret det i praksis. I DACH-området tæller den gruppe kun en håndfuld virksomheder, og vi er en af dem.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1228,1310,1255],"Microsoft Partner",{"id":1312,"title":1313,"author":1314,"cta":494,"description":1315,"hideInRecent":484,"layout":790,"meta":1316,"moment":1317,"path":1321,"stem":1322,"tags":1323,"webcast":484},"content_da/posts/2026-06-09-vair-run.md","160 kilometer for en god sag",[1116],"Søndag morgen, klokken 8:30, Holbeinsteg ved Main. Elleve kolleger i ens NinjaCat-shirts, klar til Frankfurter Runden. Regn, lyn og torden inklusive. At løbe for en god sag var motivation nok til at snøre løbeskoene på trods af det dårlige vejr.",{"lang":792,"date":1317,"categories":1318,"blogtitlepic":1319,"customExcerpt":1320},"2026-06-08",[1222],"frankfurter-runden.png","Elleve kolleger, 16 omgange, 160 kilometer, et tordenvejr og en podieplacering: glueckkanja var med til Frankfurter Runden 2026 og donerede for hver løbet omgang til VAIR e.V., der bygger en inkluderende sports- og kulturpark i Offenbach.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1324,1294,1325],"Top Arbeitgeber","Soziales Engagement",{"id":1327,"title":1328,"author":1329,"cta":494,"description":1330,"hideInRecent":484,"layout":790,"meta":1331,"moment":1332,"path":1336,"stem":1337,"tags":1338,"webcast":484},"content_da/posts/2026-04-10-incident-to-intelligence.md","Anatomien af en ukendt AMOS Stealer: fra alert til immunitet på timer",[1097],"Når en alert udløses i vores SOC, begynder uret at løbe: ikke kun for den berørte kunde, men for alle organisationer under vores beskyttelse. Det farligste øjeblik i det moderne trusselslandskab er Intelligence Gap, tidsvinduet mellem den første anvendelse af en ny malwarevariant og den dag, branchen hører om den.",{"lang":792,"date":1332,"categories":1333,"blogtitlepic":1334,"customExcerpt":1335},"2026-04-10",[797],"head-amos-stealer.png","En hidtil udokumenteret AMOS Stealer-variant kompromitterede et macOS-endpoint. Ingen kendte hashes, ingen C2-data i offentlige databaser. Vores SOC skilte seks obfuskeringslag ad, udtrak alle indikatorer og rullede beskyttelsen ud til alle SOC-kunder inden for timer, endnu før branchen overhovedet havde set samplet.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1339,1340,1341,1342,1343],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1345,"title":1346,"author":1347,"cta":494,"description":1348,"hideInRecent":484,"layout":790,"meta":1349,"moment":1350,"path":1353,"stem":1354,"tags":494,"webcast":484},"content_da/posts/2026-03-21-microsoft-edge-corporate-browser.md","Derfor bør Edge være jeres eneste corporate browser",[888],"Valget af browser er en strategisk beslutning i virksomhedsmiljøer, fordi det direkte påvirker, hvor meget sikkerhed og hvor stort et administrationsarbejde I reelt har. Google Chrome var længe den nærliggende mulighed, men Microsoft Edge har udviklet sig til en browser, der griber direkte ind i den eksisterende stak, især når Microsoft 365 er i brug, og administrationen kører gennem Intune.",{"lang":792,"date":1350,"blogtitlepic":1351,"customExcerpt":1352},"2026-03-21","head-microsoft-edge-default-browser.jpg","Ingen virksomhed har for alvor valgt Chrome; den var der bare, med sin egen sync-logik, sin egen kontohåndtering og sin egen politikflade. Microsoft Edge griber derimod direkte ind i den infrastruktur, der alligevel kører: Entra ID, Intune, Defender. Dette indlæg viser, hvordan skiftet ser ud, hvordan Chrome omdirigeres til en landingpage via en Intune-politik, og hvad der falder væk, når man holder op med at drive to browsere parallelt.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1356,"title":1357,"author":1358,"cta":494,"description":1359,"hideInRecent":484,"layout":790,"meta":1360,"moment":1361,"path":1365,"stem":1366,"tags":1367,"webcast":484},"content_da/posts/2026-03-20-stryker-attack-intune-privilege.md","Én admin-konto var alt, hvad der skulle til.",[992],"Onsdag den 11. marts 2026. Medarbejdere på Stryker-kontorer i 79 lande tændte deres computere og fandt dem tomme. Login-skærme erstattet af et logo. Firmabærbare, arbejdstelefoner, private enheder tilmeldt virksomhedens BYOD-program, alle slettet samtidig, natten over. Ingen ransomware, ingen malware-signaturer, intet, som et endpoint-detection-værktøj kunne have opdaget.",{"lang":792,"date":1361,"categories":1362,"blogtitlepic":1363,"customExcerpt":1364},"2026-03-20",[797],"head-stryker.jpg","Den 11. marts 2026 slettede Handala enheder i 79 lande, og alt, hvad der skulle til, var en kompromitteret Intune-admin-konto. Ingen malware, ingen exploit, kun legitime management-værktøjer vendt mod deres ejere. Hvad der skete, hvorfor det virkede, og hvilke to arkitektoniske huller der skal lukkes.","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[71,1211,1212],{"id":1369,"title":1370,"author":1371,"cta":494,"description":1372,"hideInRecent":484,"layout":790,"meta":1373,"moment":1374,"path":1378,"stem":1379,"tags":1380,"webcast":484},"content_da/posts/2026-03-16-ai-agent-hackathon.md","Seks agenter. Fire uger. Rigtig drift.",[1018],"Hvor mange timer bruger jeres IT-afdeling om ugen på opgaver, som en agent kunne klare på minutter?",{"lang":792,"date":1374,"categories":1375,"blogtitlepic":1376,"customExcerpt":1377},"2026-03-16",[1222],"head-ai-agent-hackathon.jpg","Seks virksomheder, fire ugers byggefase, seks fungerende AI Agents. Det var den første glueckkanja AI Agent Hackathon. Kiekert, Dr. Oetker, Eckes-Granini, igefa og lila logistik har bygget agenter i Copilot Studio, som kører produktivt i dag. Her er, hvad der kom ud af det, og hvordan formatet fungerer.","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1255,1381,1382,1383],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1385,"Fritz Zurhorst":1386,"Nadine Klein":1387,"Jan Geisbauer":1388,"Carolin Kanja":1392,"Anna Ulbricht":1393,"Annette Brauns":1394,"Pascal Asch":1395,"Steffen Schwerdtfeger":1396},{"display_name":523,"avatar":858,"permalink":859,"twitter":860,"linkedin":861,"imageOffsetTop":862,"imageOffsetLeft":863},{"display_name":832,"avatar":833,"permalink":834,"linkedin":835,"imageOffsetTop":836},{"display_name":852,"avatar":853,"permalink":854,"twitter":855,"linkedin":856,"imageOffsetTop":836},{"display_name":992,"avatar":993,"permalink":994,"twitter":995,"linkedin":995,"imageOffsetTop":836,"socials":1389},[1390,1391],{"text":472,"href":998},{"text":1000,"href":1001},{"display_name":1018,"avatar":1019,"permalink":1020,"twitter":1021,"linkedin":1022},{"display_name":1109,"avatar":1110,"permalink":1111,"linkedin":1112,"imageOffsetTop":1113,"imageOffsetLeft":1114},{"display_name":1116,"avatar":1117,"permalink":1118,"linkedin":1119,"imageOffsetTop":1120,"imageOffsetLeft":862},{"display_name":1097,"avatar":1098,"permalink":1099,"linkedin":1100,"imageOffsetTop":935},{"display_name":888,"avatar":889,"permalink":890,"linkedin":891,"twitter":892,"imageOffsetTop":893,"imageOffsetLeft":894},{"id":827,"extension":828,"meta":1398,"stem":8,"__hash__":1178},{"Karsten Kleinschmidt":1399},{"display_name":523,"avatar":858,"permalink":859,"twitter":860,"linkedin":861,"imageOffsetTop":862,"imageOffsetLeft":863},1791383910986]