[{"data":1,"prerenderedAt":1399},["ShallowReactive",2],{"sc:header-data-ja":3,"sc:footer-data-ja":489,"post-ja--posts-2026-09-22-end-of-mfa-sms-1986623a76fc6e":519,"authors_data":823,"content-ja-list-7b291c2dd91a4":1177,"authors_data:Karsten Kleinschmidt":1396},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"ja":13},{"title":14,"url":15,"alt":16},"ホーム","/ja","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"ja":21},{"title":22,"description":23},"Workplace","Microsoft 365を基盤に、スマートで安全な、柔軟性の高いワークプレイスを実現します。最新のテクノロジーとアイデンティティサービスが一つにつながります。",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"ja":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"ja":34},{"title":35,"url":36},"Managed Intune","/ja/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"ja":40},{"title":41,"url":42},"Managed Entra","/ja/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"ja":46},{"title":47,"url":48},"Managed Workplace","/ja/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"ja":52},{"title":53,"url":54},"Consulting Services","/ja/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"ja":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"ja":64},{"title":65,"url":66},"Microsoft Entra Suite","/ja/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"ja":70},{"title":71,"url":72},"Microsoft Intune","/ja/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"ja":76},{"title":77,"url":78},"Microsoft Windows","/ja/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"ja":82},{"title":83,"url":84},"Windows 365 Cloud PC","/ja/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"ja":88},{"title":89,"url":90},"Cloud Workplace Foundation","/ja/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"ja":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"ja":100},{"title":101,"url":102},"Microsoft 365 Copilot","/ja/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"ja":106},{"title":107,"url":108},"Teams","/ja/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"ja":112},{"title":113,"url":114},"SharePoint & Power Platform","/ja/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"ja":118},{"title":119,"url":120},"Exchange Online","/ja/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"ja":124},{"title":125,"url":126},"Information Protection & Compliance","/ja/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"ja":130},{"title":131,"description":132},"Azure","Azureで成長を後押しします。IaaSとPaaSによって、クラウドのコストを下げ、効率を高め、イノベーションを進めます。",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"ja":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"ja":142},{"title":143,"url":144},"Azure Managed Services","/ja/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"ja":148},{"title":149,"url":150},"Azure Consulting","/ja/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"ja":154},{"title":155},"シナリオ",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"ja":160},{"title":161,"url":162},"クラウドを計画する","/ja/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"ja":166},{"title":167,"url":168},"クラウドへ移行する","/ja/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"ja":172},{"title":173,"url":174},"ビジネスを刷新する","/ja/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"ja":178},{"title":179,"url":180},"VMware戦略を立て直す","/ja/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"ja":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"ja":190},{"title":191,"url":192},"Azure Foundation","/ja/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"ja":196},{"title":197,"url":198},"Azure AI Foundation","/ja/azure/azure-ai-foundation",{"name":86,"languages":200},{"ja":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"ja":205},{"title":206,"url":207},"Azure Data Foundation","/ja/azure/azure-data-foundation",{"name":188,"languages":209},{"ja":210},{"title":211,"url":212},"Azure Container Foundation","/ja/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"ja":216},{"title":217,"url":218},"Managed Dark Tenant","/ja/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"ja":222},{"title":223,"url":224},"Cloud Adoption Framework","/ja/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"ja":228},{"title":229,"url":230},"Cloud Competence Center","/ja/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"ja":234},{"title":235,"description":236,"emergency":237},"Security","受賞歴のある24時間365日のManaged Service、インシデント対応、最新水準の保護で、クラウドの安全を見守り、インフラを守ります。",{"text":238,"href":239,"skin":240,"icon":241},"サイバー攻撃の渦中ですか？","/ja/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"ja":249},{"title":250,"url":251},"Managed Red Tenant","/ja/security/managed-red-tenant",{"name":214,"languages":253},{"ja":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"ja":259},{"title":260,"url":261},"Sentinel Data Lake","/ja/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"ja":265},{"title":266,"url":267},"Security Consulting","/ja/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"ja":274},{"title":275,"url":276},"Cloud Security Operations Center","/ja/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"ja":280},{"title":281,"url":282},"Global Secure Access","/ja/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"ja":286},{"title":287,"url":288},"MyWorkID","/ja/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"ja":295},{"title":296,"url":297},"Preventive Services","/ja/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"ja":301},{"title":302,"url":303},"Data Security Service","/ja/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"ja":307},{"title":308,"url":309},"Security Copilot Agents","/ja/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"ja":313},{"title":314,"url":315},"NIS2を技術で実装する","/ja/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"ja":319},{"title":320,"description":321},"製品","完全に安全で100%クラウドネイティブなMicrosoft環境のためのCompanion製品です。協働、ネットワーク認証、ソフトウェア管理を強化します。",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"ja":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","クラウドベースのソフトウェア配布",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"ja":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","クラウドからの証明書配布",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"ja":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Office 365のデータをローカルで利用",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"ja":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","サーバー間のデータ移行",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"ja":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Microsoft 365向けのTerraform Provider",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"ja":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","ネットワークの認証",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"ja":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Microsoft Teamsで連絡先を探す",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"ja":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","Windows Autopilotのリアルタイム監視",{"name":396,"languages":397},"casestudies",{"ja":398},{"title":399,"url":400,"description":401},"導入事例","/ja/casestudies","当社はクラウドの先駆者として、包括的なクラウドソリューションを提供するMicrosoftのトップパートナーです。ブループリントに基づくアプローチとInfrastructure as Codeの知見が土台にあります。",{"name":403,"languages":404,"children":407},"company",{"ja":405},{"title":406,"description":401},"会社",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"ja":411},{"title":412},"会社概要",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"ja":417},{"title":418,"url":419},"Facts & Figures","/ja/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"ja":423},{"title":424,"url":425},"お問い合わせと拠点","/ja/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"ja":429},{"title":430,"url":431},"スイスのglueckkanja","/ja/company/switzerland",{"name":433,"languages":434},"austria",{"ja":435},{"title":436,"url":437},"オーストリアのglueckkanja","/ja/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"ja":441},{"title":442},"キャリア",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"ja":447},{"title":448,"url":449},"採用情報","/ja/career",{"name":451,"languages":452},"company-young-professionals",{"ja":453},{"title":454,"url":455},"Young Professionals","/ja/young-professionals",{"name":457,"languages":458},"company-jobs",{"ja":459},{"title":460,"url":461},"募集職種","/ja/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"ja":465},{"title":466},"最新情報",[468,474],{"name":469,"languages":470},"company-blog",{"ja":471},{"title":472,"url":473},"ブログ","/ja/blog",{"name":469,"languages":475},{"ja":476},{"title":477,"url":478},"イベント","/ja/events",[480],{"name":481,"languages":482},"career-meta",{"ja":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"ja":487},{"title":488,"url":425,"active":484},"お問い合わせ",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksJa":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"プライバシーポリシー","/ja/privacy",{"title":514,"url":515},"運営者情報","/ja/imprint",{"title":517,"url":518},"Cookieなし","/ja/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":778,"eventid":494,"extension":787,"hideInRecent":484,"layout":788,"meta":789,"moment":813,"navigation":325,"path":814,"seo":815,"stem":816,"tags":817,"webcast":484,"__hash__":822},"content_ja/posts/2026-09-22-end-of-mfa-sms.md","MFA向けSMSの終わり",[523],"Karsten Kleinschmidt",{"type":525,"value":526,"toc":777},"minimal",[527,532,536,557,561,621,631,638,641,644,647,650,653,657,659,662,665,668,671,674,677,679,682,685,688,691,693,696,703,708,735,738,741,747,750,752,755,766,769,771,774],[528,529,531],"h2",{"id":530},"tldr","TLDR",[533,534,535],"p",{},"{: .h3-font-size}",[537,538,540,541,540,545,540,548,540,551,540,554],"ul",{"style":539},"margin: 0.25rem 0","\n  ",[542,543,544],"li",{},"Microsoftは2027年2月1日をもって、Entra IDにおける多要素認証向けの自社SMSおよび音声通話サービスを終了します。",[542,546,547],{},"グローバル管理者と外部ゲストには2027年7月1日までの例外が適用されます。",[542,549,550],{},"2026年9月1日以降、Microsoftは対象となるユーザーに対し、登録キャンペーンの一環としてパスキーの設定を求めています。",[542,552,553],{},"対象となるのはSMSを実際に使っているユーザーだけではありません。SMSまたは音声通話が方式としてまだ許可されている、あるいは登録されているアカウントも対象です。セルフサービスパスワードリセットのような復旧プロセスも確認が必要です。",[542,555,556],{},"企業はこの必要な移行を機に、フィッシング耐性のある方式へ切り替え、残っているパスワードの必要性を体系的に減らすべきです。",[558,559,560],"style",{},"\ntable {\n  font-family: arial, sans-serif;\n  border-collapse: collapse;\n  width: 100%;\n  background-color: #fff\n}\n\ntd, th {\n  border: 1px solid #dddddd;\n  text-align: left;\n  padding: 8px;\n}\n\ntr:nth-child(even) {\n  background-color: #dddddd;\n}\n\ntd:first-child, th:first-child {\n  white-space: nowrap;\n}\n",[562,563,564,577],"table",{},[565,566,567],"thead",{},[568,569,570,574],"tr",{},[571,572,573],"th",{},"日付",[571,575,576],{},"何が起きるか",[578,579,580,589,597,605,613],"tbody",{},[568,581,582,586],{},[583,584,585],"td",{},"2026年9月1日",[583,587,588],{},"対象となるすべてのユーザーに対し、パスキーが追加の方式として有効化されます。登録キャンペーンは「Microsoft managed」に設定されています。これによりサインイン時にパスキー登録の要求が生成されます。",[568,590,591,594],{},[583,592,593],{},"2026年9月18日",[583,595,596],{},"SMSの代替となるサードパーティ提供者がMicrosoft Security Storeに表示されます",[568,598,599,602],{},[583,600,601],{},"2026年10月30日",[583,603,604],{},"Security Store経由でサードパーティSMSを設定できるようになります",[568,606,607,610],{},[583,608,609],{},"2027年2月1日",[583,611,612],{},"Microsoft自身のSMSおよび音声通話サービスが大半のユーザーで終了します。ほかに適切なMFA方式が利用できない場合、サインインの途中でパスキーを登録しなければ先に進めません。",[568,614,615,618],{},[583,616,617],{},"2027年7月1日",[583,619,620],{},"MicrosoftのSMS／音声がグローバル管理者と外部ゲスト（B2Bゲスト）でも終了します。",[533,622,626,627],{"className":623,"style":625},[624],"font-size-1","grid-column: breakout; background-color: #fff; z-index: 1","出典: ",[628,629,630],"a",{"href":630},"https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sms-voice-retirement",[533,632,633,634,637],{},"2026年9月1日以降、Microsoftは各テナントで登録キャンペーンを有効化しており、SMSまたは音声通話によるMFAが有効になっているすべてのユーザーに対し、次回のサインイン時にパスキーの設定を求めています。ユーザーはこれを当面スキップできます。",[635,636],"br",{},"\n自動の登録キャンペーンとパスキーの有効化は、一時的に回避できます。ただしMicrosoft自身のSMSおよび音声通話サービスの停止日が変わるわけではありません。",[533,639,640],{},"2027年2月1日をもって、一般ユーザー向けのMicrosoft自身のSMSおよび音声通話サービスがオプトアウトの余地なく終了します。追加の認証方式としてSMSまたは音声通話しか利用できないユーザーアカウントは、期日までに代替の方式が必要です。そうでなければ、対象ユーザーは強い認証を求めるサインインを完了できなくなります。",[533,642,643],{},"2027年7月1日には、グローバル管理者と外部ゲストについてもMicrosoftのSMS／音声が停止されます。",[533,645,646],{},"代替としては特にパスキー、Windows Hello for Business、FIDO2セキュリティキー、そして利用シナリオに応じたその他の適切な方式が考えられます。番号照合を使うMicrosoft AuthenticatorはSMSに比べて保護を高めますが、それ自体はフィッシング耐性がありません。",[533,648,649],{},"規制上または運用上の理由でSMSを維持しなければならない場合は、Microsoft Security Storeの通信事業者経由で引き続き利用できます。その場合は別途の契約となり、課金はメッセージ単位になる予定です。提供者は9月18日から表示され、設定できるのは10月30日からです。つまりMicrosoftは今後このサービスを自社では運用せず、外部の提供者に委ねます。",[533,651,652],{},"見落とされがちな点があります。対象はSMSを使っている人ではなく、SMSが有効になっている人だということです。何年も前からAuthenticatorアプリを使っていても、バックアップとして電話番号を登録したままの人は、これまで定期的にテキストコードを待っていた人と同じように対象になります。多くのテナントでは、歴史的にこれが明確な多数派です。もう一つ重要な点があります。この廃止はサインインだけの話ではありません。この変更はセルフサービスパスワードリセットにも及びます。SMSと音声通話は、その用途でもMicrosoft自身の検証方式としては利用できなくなります。そのため組織は、パスワードリセットとアカウント復旧にどの代替方式を用意するのかを確認しなければなりません。",[528,654,656],{"id":655},"なぜmicrosoftはこれを行うのか","なぜMicrosoftはこれを行うのか",[533,658,535],{},[533,660,661],{},"この決定を押しつけと読むこともできます。あるいは実態どおりに読むこともできます。SMSは現代のリアルタイムフィッシングやSIMスワップ攻撃に対して、もはや十分な保護を提供しないという認識の表明である、と。",[533,663,664],{},"今日のMicrosoft 365アカウントへの典型的な攻撃は、もうパスワードを推測することではありません。ユーザーは本物そっくりのサインインページにたどり着き、そこで資格情報とMFAコードを入力します。攻撃者はその両方をリアルタイムでサインインに使い、セッショントークンを取得してユーザーのIDを乗っ取ります。こうした道具は、いまやスケールする攻撃サービスとしてダークネットで提供されています。自動化とAIは、信憑性のあるフィッシングキャンペーンの手間をさらに下げています。",[533,666,667],{},"パスキーのようなフィッシング耐性のある方式は、別の仕組みを使います。パスキーは、設定された対象のウェブアドレスと固く結びついており、偽のウェブサイトでは使えません。詐欺者がサインインを気づかれないように本物のサイトへ中継する巧妙な攻撃も空振りに終わります。ブラウザは正しいアドレスにいないことを認識し、そもそもパスキーを提示しません。仮に応答が本物のサービスに届いたとしても、そこには偽造できない形で誤ったアドレスが入っており、サービスはそれを拒否します。これにより判定は人ではなく技術の側に移り、暗号によって担保されます。ユーザーがウェブサイトの真正性を自分で見分ける必要はもうありません。この点がパスキーを、パスワードや従来型の2要素認証と分けています。\nWindows Hello for Business、FIDO2セキュリティキー、Microsoft Authenticatorのパスキーも、同様のフィッシング耐性の原理を使います。ただし運用とユーザー導線の面では同一ではありません。デバイスへの束縛、同期、復旧、対応プラットフォームが異なるため、ペルソナごとに評価する必要があります。技術自体は何年も前からあります。新しいのは、Microsoftがいまそれを標準にしようとしていることです。",[533,669,670],{},"ちなみに銀行はこの道を数年前に通っています。長らくオンラインバンキングで最も一般的な承認方式だったSMS-TANを、大半の金融機関は自主的に廃止し、pushTAN、photoTAN、chipTANのようなデバイスや取引に紐づく方式へ置き換えました。技術的な実装は異なりますが、目的は似ています。承認を、登録済みのデバイスと個別の取引により強く結びつけることです。理由も今日と似ています。SIMスワップ、傍受されたメッセージ、そしてリアルタイムフィッシングです。",[533,672,673],{},"NIS2、DORA、ISO 27001の対象となる組織にとって、弱い認証方式を適切だと説明するのはますます難しくなります。ですからフィッシング耐性のある方式は、技術的な安全性だけでなく、経営、内部監査、監督機関に対する説明能力も強めます。",[528,675,676],{"id":676},"パスワードは廃止できるのか",[533,678,535],{},[533,680,681],{},"移行にあたってどのみち認証方式を棚卸しし、ユーザーに周知し、新しいサインイン方式を導入するのであれば、同時にパスワードが実際にまだ必要な場所はどこかを確認すべきです。パスキーは、対応するアプリケーションではパスワードと第2要素の両方を置き換えられます。ノートPCのWindows Hello for BusinessとMicrosoft Authenticatorのパスキーを組み合わせれば、一般的なMicrosoftサービスへのパスワードレスなサインインが可能になり、適切な構成であればオンプレミスのActive Directoryリソースへのアクセスも可能です。",[533,683,684],{},"新しい従業員への配布も同様に設計できます。初期パスワードの代わりに、期限付きのTemporary Access Passを使えます。Entra IDはこれを正規のMFAおよびサインイン方式として認めています。これによりAutopilotで配布された端末での最初のサインインが行われます。その後、Windows Helloとパスキーを設定します。Temporary Access Passの期限が切れた後は、通常のサインインにパスワードは不要になります。",[533,686,687],{},"目指す姿では、従業員は通常の業務のなかで自分のパスワードを覚える必要も入力する必要もありません。これによりフィッシングのリスクとパスワードリセットの需要が大きく下がります。",[528,689,690],{"id":690},"実務でつまずくところ",[533,692,535],{},[533,694,695],{},"glueckkanjaはこうした移行を日常的に支援しています。難しさが技術にあることはまれです。難しさは実装の細部にあります。",[533,697,698,702],{},[699,700,701],"b",{},"有効化は強制ではありません。","パスキーを有効にしただけでは、関連するすべてのサインインでそれが使われる保証にはなりません。「System-preferred MFA」も、利用可能な最も強い方式を優先するだけで、拘束力のあるアクセス要件を強制するわけではありません。あるリソースにフィッシング耐性のある認証でのみ到達できるようにしたいなら、条件付きアクセスの適切なAuthentication Strengthで強制する必要があります。そうしなければ、より弱いフォールバック方式が引き続き提示され得ます。その場合、パスキーは「飾り」にすぎません。",[533,704,707],{"className":705},[706],"mb-n6","現実的な進め方は4つのステップをたどります。",[709,710,711,717,723,729],"ol",{},[542,712,713,716],{},[699,714,715],{},"棚卸し。","誰がSMSと音声通話を有効にしているのか。誰が電話番号を登録していて、誰が最後に実際にそれを使ったのか。テナントは新しい認証方式ポリシーへ移行済みか。どのゲストユーザーがいて、彼らは自分のテナントを持っているのか。",[542,718,719,722],{},[699,720,721],{},"ペルソナの決定。","どのパスキープロファイル（デバイス束縛型か同期型か）がどのユーザーグループに合うのか、そしてどの条件付きアクセスポリシーがAuthentication Strengthでそれを拘束力をもって強制するのか。共有デバイスや外部ユーザーにはどう対処するのか。スマートフォンを持たない従業員はどうするのか。ゲストユーザーを持つパートナー企業をMFAについて信頼するのか。",[542,724,725,728],{},[699,726,727],{},"パイロットとキャンペーン。","まずパイロットグループで移行を試します。その後、周知を伴い猶予を限定した登録キャンペーンが続きます。ユーザーへの十分な準備は問い合わせを減らし、サービスデスクへの追加負荷を避けます。\n例外には2027年2月1日より前の有効期限が必要です。",[542,730,731,734],{},[699,732,733],{},"停止。","登録キャンペーンの完了後にはじめて、電話番号をMFA方式として削除し、ポリシーでSMSを無効化します。停止はMicrosoftの期日より前に意図的に行い、対象となるユーザーがもういないことを確実にできるようにします。",[533,736,737],{},"B2Bゲストには特有の事情があります。外部ユーザーには内部アカウントとは異なる登録モデルと信頼モデルが適用されます。ホームテナントのMFAをCross-Tenant Access Settings経由で確立できるか、そして自分のEntraテナントを持たないゲストにどの代替を用意するかを確認してください。2026年9月19日時点で、Microsoftは内部ゲストユーザー向けのパスキー対応を10月までに提供する計画です。より頻度の高い外部ゲスト（B2B）のケースは、パスキー対応の提供が後になり、日付は今後案内されます。おそらく多少の時間を稼ぐために、外部ゲスト向けのSMSと音声通話の提供は2027年7月まで延長されました。",[533,739,740],{},"それまでは、適切な移行方式または信頼にもとづくクロステナントのシナリオを用意する必要があります。",[533,742,743,746],{},[699,744,745],{},"パスキーが解決しないこと。","フィッシング耐性のあるサインインが守るのは認証の手続きであって、すでに確立されたセッションのすべてを自動的に守るわけではありません。マルウェア、侵害されたブラウザ、盗まれたセッショントークンは引き続き重要なリスクです。ですからAuthentication Strength、デバイスの準拠性、エンドポイント保護、リスクベースのアクセス判断、適切なセッション制御は、まとめて計画すべきです。そうすればリスクを下げられますし、デバイスの準拠性を必須にする場合は、アクセスを適切に管理された端末に限定できます。",[528,748,749],{"id":749},"当社の取り組み方",[533,751,535],{},[533,753,754],{},"glueckkanjaでは、IDと端末を一つの統制システムとして捉えています。認証方式のポリシー、パスキープロファイル、Authentication Strength、条件付きアクセス、Intuneは、追跡可能な形で定義し、バージョン管理し、Infrastructure as Code（IaC）の原則に従って自動でロールアウトします。これにより目標状態と逸脱を文書化でき、変更をバージョン管理のうえで証明できます。ポータル上で状態を手作業で再構成することなく、運用、管理、監査のための確かな土台ができます。",[533,756,757,758,761,762,765],{},"この進め方は、当社のサービスである",[628,759,41],{"href":760},"https://www.glueckkanja.com/entra-intune/managed-entra","と",[628,763,35],{"href":764},"https://www.glueckkanja.com/entra-intune/managed-intune","の一部です。これらは技術ブループリント、継続的な調整、追跡可能な構成を組み合わせています。",[528,767,768],{"id":768},"まとめ",[533,770,535],{},[533,772,773],{},"この見方に立てば、SMSの終了は厄介ごとではなく歓迎すべき契機です。とうに必要だった棚卸しを迫ります。そして、最も弱い環がもう存在しないIDへの扉を開きます。つまり、人の頭の中にあるパスワードです。",[533,775,776],{},"自社のテナントが現在どの位置にあるかを知りたい方には、まずアセスメントを実施することもできます。ぜひご相談ください。",{"title":778,"searchDepth":779,"depth":779,"links":780},"",2,[781,782,783,784,785,786],{"id":530,"depth":779,"text":531},{"id":655,"depth":779,"text":656},{"id":676,"depth":779,"text":676},{"id":690,"depth":779,"text":690},{"id":749,"depth":779,"text":749},{"id":768,"depth":779,"text":768},"md","post",{"lang":790,"seoTitle":791,"titleClass":792,"date":793,"categories":794,"blogtitlepic":795,"socialimg":796,"customExcerpt":797,"keywords":798,"asideNav":799,"maxContent":484,"published":325},"ja","MFA向けSMSの終わり：企業がいまフィッシング耐性のある、できるだけパスワードレスな認証方式へ移行すべき理由。","h2-font-size","2026-09-21",[235],"head-conditional-access.jpg","/blog/heads/head-conditional-access.jpg","企業がいまフィッシング耐性のある、できるだけパスワードレスな認証方式へ移行すべき理由。","Entra ID SMS 廃止, MFA SMS 終了, フィッシング耐性のあるMFA, パスキー, FIDO2, Windows Hello for Business, Temporary Access Pass, Authentication Strength, 条件付きアクセス, セルフサービスパスワードリセット, パスワードレス認証, Microsoft Security Store",{"menuItems":800},[801,803,805,807,809,811],{"href":802,"text":531},"#tldr",{"href":804,"text":656},"#なぜmicrosoftはこれを行うのか",{"href":806,"text":676},"#パスワードは廃止できるのか",{"href":808,"text":690},"#実務でつまずくところ",{"href":810,"text":749},"#当社の取り組み方",{"href":812,"text":768},"#まとめ","2026-09-22","/posts/2026-09-22-end-of-mfa-sms",{"title":521,"description":778},"posts/2026-09-22-end-of-mfa-sms",[235,818,819,820,821],"Authentication","Microsoft Entra ID","MFA","Passkeys","NhqfhbOTgdgWIZxuwrNRsAc3JnquuNIfB5uM0AEAma4",{"id":824,"extension":825,"meta":826,"stem":8,"__hash__":1176},"authors_data/authors.json","json",{"path":827,"Fritz Zurhorst":828,"Alexander Schlindwein":834,"Sophie Luna":840,"Nadine Klein":848,"Karsten Kleinschmidt":854,"Julian Wendt":861,"Holger Bunkradt":866,"Ralf Mania":872,"Oliver Kieselbach":878,"Steffen Schwerdtfeger":884,"Gunnar Winter":892,"Jan Petersen":897,"Thorsten Kunzi":902,"Moritz Pohl":906,"Thorben Pöschus":911,"Christoph Hannebauer":917,"Marco Scheel":921,"Christopher Brumm":926,"Florian Klante":933,"Niklas Bachmann":938,"Nils Krautkrämer":943,"Patrick Treptau":949,"Peter Beckendorf":954,"Patrick Sobau":959,"Jörg Wunderlich":964,"Michael Breither":968,"Christian Kanja":973,"Zeba Hoffmann":979,"Jochen Fröhlich":984,"Jan Geisbauer":988,"Gerrit Reinke":1000,"Christian Kordel":1006,"Stephan Wälde":1010,"Carolin Kanja":1015,"Adrian Ritter":1021,"Marvin Bangert":1026,"Thorsten Pickhan":1032,"Christian Lorenz":1038,"Denis Böhm":1043,"Fabian Bader":1048,"Juan Jose Fernandez Perez":1054,"Mahschid Sayyar":1059,"Benjamin Dassow":1064,"Markus Walschburger":1069,"Jonathan Haist":1074,"Daniel Rohregger":1079,"Thomas Naunheim":1084,"Florian Stöckl":1089,"Pascal Asch":1094,"Markus Kättner":1099,"Anna Ulbricht":1106,"Annette Brauns":1113,"body":1119,"title":1175},"/authors",{"display_name":829,"avatar":830,"permalink":831,"linkedin":832,"imageOffsetTop":833},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":835,"avatar":836,"permalink":837,"twitter":838,"linkedin":839},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":841,"avatar":842,"permalink":843,"twitter":844,"linkedin":845,"imageOffsetLeft":846,"imageOffsetTop":847},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":849,"avatar":850,"permalink":851,"twitter":852,"linkedin":853,"imageOffsetTop":833},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":523,"avatar":855,"permalink":856,"twitter":857,"linkedin":858,"imageOffsetTop":859,"imageOffsetLeft":860},"/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":862,"avatar":863,"permalink":864,"linkedin":865},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":867,"avatar":868,"permalink":869,"linkedin":870,"twitter":871},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":873,"avatar":874,"permalink":875,"linkedin":876,"twitter":877},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":879,"avatar":880,"permalink":881,"linkedin":882,"twitter":883},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":885,"avatar":886,"permalink":887,"linkedin":888,"twitter":889,"imageOffsetTop":890,"imageOffsetLeft":891},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":893,"avatar":894,"permalink":895,"twitter":844,"linkedin":896},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":898,"avatar":899,"permalink":900,"twitter":844,"linkedin":901},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":903,"avatar":904,"permalink":905,"twitter":844,"linkedin":896,"imageOffsetTop":833},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":907,"avatar":908,"permalink":909,"twitter":844,"linkedin":910},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":912,"avatar":913,"permalink":914,"twitter":915,"linkedin":916},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":918,"avatar":919,"permalink":920,"twitter":844,"linkedin":896,"imageOffsetTop":833},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":922,"avatar":923,"permalink":924,"twitter":925,"linkedin":925},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":927,"avatar":928,"permalink":929,"twitter":930,"linkedin":931,"imageOffsetTop":932},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":934,"avatar":935,"permalink":936,"linkedin":937,"twitter":844},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":939,"avatar":940,"permalink":941,"linkedin":942,"twitter":844},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":944,"avatar":945,"permalink":946,"twitter":947,"linkedin":948},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":950,"avatar":951,"permalink":952,"linkedin":953,"twitter":844},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":955,"avatar":956,"permalink":957,"linkedin":958,"twitter":844,"imageOffsetTop":833},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":960,"avatar":961,"permalink":962,"linkedin":963,"twitter":844},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":965,"avatar":966,"permalink":967,"twitter":844},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":969,"avatar":970,"permalink":971,"twitter":844,"linkedin":972},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":974,"avatar":975,"permalink":976,"twitter":977,"linkedin":978},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":980,"avatar":981,"permalink":982,"linkedin":983,"twitter":844},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":985,"avatar":986,"permalink":987,"twitter":844,"linkedin":896},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":989,"avatar":990,"permalink":991,"twitter":992,"linkedin":992,"imageOffsetTop":833,"socials":993},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[994,997],{"text":995,"href":996},"Blog","https://emptydc.com",{"text":998,"href":999},"Podcast","https://hairlessinthecloud.com",{"display_name":1001,"avatar":1002,"permalink":1003,"twitter":1004,"linkedin":1005},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1007,"avatar":1008,"permalink":1009,"twitter":844,"linkedin":896},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1011,"avatar":1012,"permalink":1013,"twitter":1014,"linkedin":896},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1016,"avatar":1017,"permalink":1018,"twitter":1019,"linkedin":1020},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1022,"avatar":1023,"permalink":1024,"twitter":1025,"linkedin":1025},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1027,"avatar":1028,"permalink":1029,"twitter":1030,"linkedin":1031},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1033,"avatar":1034,"permalink":1035,"twitter":1036,"linkedin":1037},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1039,"avatar":1040,"permalink":1041,"linkedin":1042,"twitter":844},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1044,"avatar":1045,"permalink":1046,"linkedin":1047,"twitter":844},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1049,"avatar":1050,"permalink":1051,"linkedin":1052,"twitter":1053},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1055,"avatar":1056,"permalink":1057,"linkedin":1058},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1060,"avatar":1061,"permalink":1062,"linkedin":1063},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1065,"avatar":1066,"permalink":1067,"linkedin":1068},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1070,"avatar":1071,"permalink":1072,"linkedin":1073},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1075,"avatar":1076,"permalink":1077,"linkedin":1078,"imageOffsetTop":833},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1080,"avatar":1081,"permalink":1082,"linkedin":1083,"imageOffsetTop":833},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1085,"avatar":1086,"permalink":1087,"linkedin":1088,"imageOffsetTop":932},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1090,"avatar":1091,"permalink":1092,"linkedin":1093,"imageOffsetTop":932},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1095,"avatar":1096,"permalink":1097,"linkedin":1098,"imageOffsetTop":932},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1100,"avatar":1101,"permalink":1102,"linkedin":1103,"imageOffsetTop":1104,"imageOffsetLeft":1105},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1107,"avatar":1108,"permalink":1109,"linkedin":1110,"imageOffsetTop":1111,"imageOffsetLeft":1112},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1114,"avatar":1115,"permalink":1116,"linkedin":1117,"imageOffsetTop":1118,"imageOffsetLeft":859},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1120,"Alexander Schlindwein":1121,"Sophie Luna":1122,"Nadine Klein":1123,"Karsten Kleinschmidt":1124,"Julian Wendt":1125,"Holger Bunkradt":1126,"Ralf Mania":1127,"Oliver Kieselbach":1128,"Steffen Schwerdtfeger":1129,"Gunnar Winter":1130,"Jan Petersen":1131,"Thorsten Kunzi":1132,"Moritz Pohl":1133,"Thorben Pöschus":1134,"Christoph Hannebauer":1135,"Marco Scheel":1136,"Christopher Brumm":1137,"Florian Klante":1138,"Niklas Bachmann":1139,"Nils Krautkrämer":1140,"Patrick Treptau":1141,"Peter Beckendorf":1142,"Patrick Sobau":1143,"Jörg Wunderlich":1144,"Michael Breither":1145,"Christian Kanja":1146,"Zeba Hoffmann":1147,"Jochen Fröhlich":1148,"Jan Geisbauer":1149,"Gerrit Reinke":1153,"Christian Kordel":1154,"Stephan Wälde":1155,"Carolin Kanja":1156,"Adrian Ritter":1157,"Marvin Bangert":1158,"Thorsten Pickhan":1159,"Christian Lorenz":1160,"Denis Böhm":1161,"Fabian Bader":1162,"Juan Jose Fernandez Perez":1163,"Mahschid Sayyar":1164,"Benjamin Dassow":1165,"Markus Walschburger":1166,"Jonathan Haist":1167,"Daniel Rohregger":1168,"Thomas Naunheim":1169,"Florian Stöckl":1170,"Pascal Asch":1171,"Markus Kättner":1172,"Anna Ulbricht":1173,"Annette Brauns":1174},{"display_name":829,"avatar":830,"permalink":831,"linkedin":832,"imageOffsetTop":833},{"display_name":835,"avatar":836,"permalink":837,"twitter":838,"linkedin":839},{"display_name":841,"avatar":842,"permalink":843,"twitter":844,"linkedin":845,"imageOffsetLeft":846,"imageOffsetTop":847},{"display_name":849,"avatar":850,"permalink":851,"twitter":852,"linkedin":853,"imageOffsetTop":833},{"display_name":523,"avatar":855,"permalink":856,"twitter":857,"linkedin":858,"imageOffsetTop":859,"imageOffsetLeft":860},{"display_name":862,"avatar":863,"permalink":864,"linkedin":865},{"display_name":867,"avatar":868,"permalink":869,"linkedin":870,"twitter":871},{"display_name":873,"avatar":874,"permalink":875,"linkedin":876,"twitter":877},{"display_name":879,"avatar":880,"permalink":881,"linkedin":882,"twitter":883},{"display_name":885,"avatar":886,"permalink":887,"linkedin":888,"twitter":889,"imageOffsetTop":890,"imageOffsetLeft":891},{"display_name":893,"avatar":894,"permalink":895,"twitter":844,"linkedin":896},{"display_name":898,"avatar":899,"permalink":900,"twitter":844,"linkedin":901},{"display_name":903,"avatar":904,"permalink":905,"twitter":844,"linkedin":896,"imageOffsetTop":833},{"display_name":907,"avatar":908,"permalink":909,"twitter":844,"linkedin":910},{"display_name":912,"avatar":913,"permalink":914,"twitter":915,"linkedin":916},{"display_name":918,"avatar":919,"permalink":920,"twitter":844,"linkedin":896,"imageOffsetTop":833},{"display_name":922,"avatar":923,"permalink":924,"twitter":925,"linkedin":925},{"display_name":927,"avatar":928,"permalink":929,"twitter":930,"linkedin":931,"imageOffsetTop":932},{"display_name":934,"avatar":935,"permalink":936,"linkedin":937,"twitter":844},{"display_name":939,"avatar":940,"permalink":941,"linkedin":942,"twitter":844},{"display_name":944,"avatar":945,"permalink":946,"twitter":947,"linkedin":948},{"display_name":950,"avatar":951,"permalink":952,"linkedin":953,"twitter":844},{"display_name":955,"avatar":956,"permalink":957,"linkedin":958,"twitter":844,"imageOffsetTop":833},{"display_name":960,"avatar":961,"permalink":962,"linkedin":963,"twitter":844},{"display_name":965,"avatar":966,"permalink":967,"twitter":844},{"display_name":969,"avatar":970,"permalink":971,"twitter":844,"linkedin":972},{"display_name":974,"avatar":975,"permalink":976,"twitter":977,"linkedin":978},{"display_name":980,"avatar":981,"permalink":982,"linkedin":983,"twitter":844},{"display_name":985,"avatar":986,"permalink":987,"twitter":844,"linkedin":896},{"display_name":989,"avatar":990,"permalink":991,"twitter":992,"linkedin":992,"imageOffsetTop":833,"socials":1150},[1151,1152],{"text":995,"href":996},{"text":998,"href":999},{"display_name":1001,"avatar":1002,"permalink":1003,"twitter":1004,"linkedin":1005},{"display_name":1007,"avatar":1008,"permalink":1009,"twitter":844,"linkedin":896},{"display_name":1011,"avatar":1012,"permalink":1013,"twitter":1014,"linkedin":896},{"display_name":1016,"avatar":1017,"permalink":1018,"twitter":1019,"linkedin":1020},{"display_name":1022,"avatar":1023,"permalink":1024,"twitter":1025,"linkedin":1025},{"display_name":1027,"avatar":1028,"permalink":1029,"twitter":1030,"linkedin":1031},{"display_name":1033,"avatar":1034,"permalink":1035,"twitter":1036,"linkedin":1037},{"display_name":1039,"avatar":1040,"permalink":1041,"linkedin":1042,"twitter":844},{"display_name":1044,"avatar":1045,"permalink":1046,"linkedin":1047,"twitter":844},{"display_name":1049,"avatar":1050,"permalink":1051,"linkedin":1052,"twitter":1053},{"display_name":1055,"avatar":1056,"permalink":1057,"linkedin":1058},{"display_name":1060,"avatar":1061,"permalink":1062,"linkedin":1063},{"display_name":1065,"avatar":1066,"permalink":1067,"linkedin":1068},{"display_name":1070,"avatar":1071,"permalink":1072,"linkedin":1073},{"display_name":1075,"avatar":1076,"permalink":1077,"linkedin":1078,"imageOffsetTop":833},{"display_name":1080,"avatar":1081,"permalink":1082,"linkedin":1083,"imageOffsetTop":833},{"display_name":1085,"avatar":1086,"permalink":1087,"linkedin":1088,"imageOffsetTop":932},{"display_name":1090,"avatar":1091,"permalink":1092,"linkedin":1093,"imageOffsetTop":932},{"display_name":1095,"avatar":1096,"permalink":1097,"linkedin":1098,"imageOffsetTop":932},{"display_name":1100,"avatar":1101,"permalink":1102,"linkedin":1103,"imageOffsetTop":1104,"imageOffsetLeft":1105},{"display_name":1107,"avatar":1108,"permalink":1109,"linkedin":1110,"imageOffsetTop":1111,"imageOffsetLeft":1112},{"display_name":1114,"avatar":1115,"permalink":1116,"linkedin":1117,"imageOffsetTop":1118,"imageOffsetLeft":859},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1178,"authors":1383},[1179,1184,1198,1212,1228,1241,1254,1267,1279,1295,1309,1324,1342,1353,1367],{"id":520,"title":521,"author":1180,"cta":494,"description":778,"hideInRecent":484,"layout":788,"meta":1181,"moment":813,"path":814,"stem":816,"tags":1183,"webcast":484},[523],{"lang":790,"date":793,"categories":1182,"blogtitlepic":795,"customExcerpt":797},[235],[235,818,819,820,821],{"id":1185,"title":1186,"author":1187,"cta":494,"description":778,"hideInRecent":484,"layout":788,"meta":1188,"moment":793,"path":1192,"stem":1193,"tags":1194,"webcast":484},"content_ja/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix。ユーザー自身がエクスプロイトになるとき、そしてそれを止める方法",[829,849],{"lang":790,"date":793,"categories":1189,"blogtitlepic":1190,"customExcerpt":1191},[235],"head-clickfix.jpg","ClickFixはユーザーを自分自身への攻撃者に変えます。偽のCAPTCHA、コピー＆ペースト、そして悪意あるコードがメモリ上で走り、ディスクには何も残りません。Microsoft Defenderがこの攻撃をどう検知するのか、検知はどこで限界に達するのか、そしてRunMRUハントと4つの防御レイヤーでその隙間をどう埋めるのかを解説します。","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1195,1196,1197],"Defender","SOC","Endpoint Security",{"id":1199,"title":1200,"author":1201,"cta":494,"description":778,"hideInRecent":484,"layout":788,"meta":1202,"moment":793,"path":1206,"stem":1207,"tags":1208,"webcast":484},"content_ja/posts/2026-09-21-red-tenant-dark-tenant-cio.md","管理業務と日常業務を1台のPCで。Game Overです。",[989],{"lang":790,"date":793,"categories":1203,"blogtitlepic":1204,"customExcerpt":1205},[235],"head-game-over-en.jpg","CIOにとってテナントが1つでは足りない理由と、2つ目がめったに検討されない理由。Managed Red Tenantは管理業務をオフィス環境からアーキテクチャとして分離し、Managed Dark Tenantは防御が破られてもなお組織が動き続けられるようにします。それが運用モデル、SOCのシグナル、そしてNISG 2026による証明義務にとって何を意味するのかを解説します。","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[235,1209,1210,1211],"Privileged Access","Zero Trust","NIS2",{"id":1213,"title":1214,"author":1215,"cta":494,"description":1216,"hideInRecent":484,"layout":788,"meta":1217,"moment":1218,"path":1223,"stem":1224,"tags":1225,"webcast":484},"content_ja/posts/2026-08-08-isg-germany-2026.md","4度のLeader。ISGドイツ調査2026のglueckkanja",[1016],"ISGは今年、調査の名称を変更しました。Microsoft Cloud EcosystemはMicrosoft AI and Cloud Ecosystemになり、名称とともに評価の尺度も移りました。問われるのはもはや、誰がMicrosoftプラットフォームを導入したかではなく、誰がCopilot、エージェント、AIワークロードを制御可能なかたちで運用しているかです。この新しい尺度によって当社の位置づけが変わることはありませんでした。ISG Provider Lens®調査ドイツ2026は、当社を4つのクアドラントでLeaderに位置づけています。Microsoft Productivity and Business Process ServicesとAzure Managed Servicesの、それぞれLarge MarketとMid Marketです。2021年、2023年、2024年、2025年に続き、ドイツでは5回目のLeader評価となります。スイスでのLeaderクアドラント入りはその2週間前でした。",{"lang":790,"date":1218,"categories":1219,"blogtitlepic":1221,"customExcerpt":1222},"2026-08-08",[1220],"Corporate","head-isg-de-2026.png","ISG Provider Lens®調査2026は、ドイツにおいてglueckkanjaを4つのクアドラントでLeaderに位置づけました。Microsoft Productivity and Business Process ServicesとAzure Managed Servicesの、それぞれLarge MarketとMid Marketです。調査の名称はMicrosoft AI and Cloud Ecosystemに変わり、評価の尺度も移りました。AIとエージェントのワークロードを制御可能なかたちで運用できるかが問われています。","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1226,1227],"Award","ISG",{"id":1229,"title":1230,"author":1231,"cta":494,"description":1232,"hideInRecent":484,"layout":788,"meta":1233,"moment":1234,"path":1238,"stem":1239,"tags":1240,"webcast":484},"content_ja/posts/2026-07-31-isg-switzerland-2026.md","Rising StarからLeaderへ。ISGスイス調査2026のglueckkanja",[1016],"2024年に当社はglueckkanja Switzerland AGを設立し、ベルンのBahnhofplatz 10bにあるzentroomにオフィスを構えました。2025年、ISGはスイス市場で当社をRising Starに位置づけました。アナリストがLeaderクアドラントへの躍進を見込むベンダーという位置づけです。その躍進がいま記録されました。ISG Provider Lens®調査2026は、スイスにおいて当社をMicrosoft AI and Cloud Ecosystemクアドラントの、Azure Managed Services領域とMicrosoft Productivity and Business Process Services領域でLeaderに位置づけています。",{"lang":790,"date":1234,"categories":1235,"blogtitlepic":1236,"customExcerpt":1237},"2026-07-31",[1220],"head-isg-ch-2026.png","ISG Provider Lens®調査2026は、スイスにおいてglueckkanjaをMicrosoft AI and Cloud Ecosystemクアドラントの、Azure Managed Services領域とMicrosoft Productivity and Business Process Services領域でLeaderに位置づけました。ベルンでの市場参入から2年、Rising Star選出から1年でのことです。","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1226,1227],{"id":1242,"title":1243,"author":1244,"cta":494,"description":778,"hideInRecent":484,"layout":788,"meta":1245,"moment":1246,"path":1250,"stem":1251,"tags":1252,"webcast":484},"content_ja/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak。OpenAI／Hugging Faceの事案が示すこと、示さないこと",[989],{"lang":790,"date":1246,"categories":1247,"blogtitlepic":1248,"customExcerpt":1249},"2026-07-24",[235],"head-outbreak.jpg","AIエージェントがテスト環境から脱出し、ゼロデイを見つけ、別の企業をハッキングする。映画の脚本のようですが、2026年7月に実際に起きました。冷静に位置づける時期です。少しの心理学、2人のセキュリティ専門家、そしてそれが自社の防御にとって何を意味するのかという問いとともに。","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1253,1196,1210],"AI",{"id":1255,"title":1256,"author":1257,"cta":494,"description":1258,"hideInRecent":484,"layout":788,"meta":1259,"moment":1260,"path":1264,"stem":1265,"tags":1266,"webcast":484},"content_ja/posts/2026-07-22-isg-cybersecurity-2026.md","LeaderそしてRising Star。ISGサイバーセキュリティ調査2026のglueckkanja",[1016],"新たに加わったクアドラントで、いきなりLeaderになりました。ISG Provider Lens®調査「Cybersecurity – Services and Solutions 2026」は、ドイツの中堅中小企業向けNext-Gen SOC/MDR Services分野でglueckkanjaをLeaderと位置づけています。Next-Gen SOC/MDR Servicesの全体市場では、ISGは当社をRising Starに選出しました。つまり、今後12か月から24か月のうちにLeaderクアドラントへ躍進するとアナリストが見込むベンダーだということです。",{"lang":790,"date":1260,"categories":1261,"blogtitlepic":1262,"customExcerpt":1263},"2026-07-22",[1220],"head-isg-cybersecurity-2026.png","ISG Provider Lens®調査 Cybersecurity 2026は、glueckkanjaをNext-Gen SOC/MDR Services（Midmarket）クアドラントのLeaderに選出しました。Next-Gen SOC/MDR Servicesの全体市場では、当社はRising Starです。ISGは当社の平均を上回る成長、Microsoftセキュリティに関する深い専門性、そしてドイツ国内から提供する24時間365日のSOCを評価しています。","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1226,1227,235],{"id":1268,"title":1269,"author":1270,"cta":494,"description":1271,"hideInRecent":484,"layout":788,"meta":1272,"moment":1273,"path":1276,"stem":1277,"tags":1278,"webcast":484},"content_ja/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity：AIが実際に働くために本当に必要なもの",[1016],"ある製造業の企業が、14,000あるSKUのうちどれが実際に利益を生んでいるのかを知りたいと考えました。答えは3つのシステムの中にありますが、それらは一度もデータを1件たりともやり取りしたことがありません。少し前までは、その答えを得るのに3つの部門、2週間、そして相当な善意が必要でした。2026年初頭からは、AIがこの問いに数分で答えられます。データを走査し、関連を結び、推奨を出す。ただし、アクセスできることが前提です。",{"lang":790,"date":1273,"categories":1274,"blogtitlepic":1275},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1253,131],{"id":1280,"title":1281,"author":1282,"cta":494,"description":1283,"hideInRecent":484,"layout":788,"meta":1284,"moment":1285,"path":1289,"stem":1290,"tags":1291,"webcast":484},"content_ja/posts/2026-07-01-onboarding-process.md","契約書にサインしたあと：当社のオンボーディングはこう進みます",[1107],"オンボーディングは実際どう進むのですか。応募者との会話で繰り返し受ける質問です。オンボーディングがぎくしゃくした経験を持つ人が少なくないからでしょう。だからこそ当社は、最初から安心してもらうことを大切にしています。",{"lang":790,"date":1285,"categories":1286,"blogtitlepic":1287,"customExcerpt":1288},"2026-07-01",[1220],"Onboarding_Blogheader","契約書にサインが済み、大きな一歩は終わりました。では、ここからどうなるのでしょうか。PreBoardingからチームでの最初の1週間まで、当社のオンボーディングの舞台裏をご案内します。","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1292,1293,1294],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1296,"title":1297,"author":1298,"cta":494,"description":1299,"hideInRecent":484,"layout":788,"meta":1300,"moment":1301,"path":1305,"stem":1306,"tags":1307,"webcast":484},"content_ja/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner：当社もその一員です",[1016],"Microsoftのパートナーエコシステムには数多くの表彰がありますが、Frontier Partner Badgeはその成り立ちにおいて他の称号と一線を画します。申請することはできず、Microsoft側の主導で、ごく限られたパートナーに授与されます。対象となるには、1つの領域で秀でるのではなく、複数の領域で同時に実力を示さなければなりません。Microsoftが確認するのは、Cloud & AI Platforms、AI Business Solutions、そしてSecurityにおける実証済みの能力です。つまり対象は、AIを既存のITへの後付けではなく、IDからエンドポイント、そして本番のAI運用までを貫くアーキテクチャの帰結として捉えている企業です。",{"lang":790,"date":1301,"categories":1302,"blogtitlepic":1303,"customExcerpt":1304},"2026-06-26",[1220],"head-frontier-partner-badge.jpg","最近、Microsoft AI Cloud Partner Programに新たな最高位の称号としてFrontier Partner Badgeが設けられました。Microsoftがこれを授与するのは、ワークプレイスからクラウドプラットフォーム、セキュリティ、そしてAIアプリケーションそのものに至るまで、Microsoftスタック全体でAIプロジェクトを確実に届けられると実績で示した、世界でもごく限られたパートナーだけです。DACH圏でこのグループに属するのは数社にすぎず、当社はそのうちの1社です。","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1226,1308,1253],"Microsoft Partner",{"id":1310,"title":1311,"author":1312,"cta":494,"description":1313,"hideInRecent":484,"layout":788,"meta":1314,"moment":1315,"path":1319,"stem":1320,"tags":1321,"webcast":484},"content_ja/posts/2026-06-09-vair-run.md","チャリティのために160キロ",[1114],"日曜の朝8時30分、マイン川沿いのHolbeinsteg。おそろいのNinjaCatシャツを着た11人の同僚が、Frankfurter Rundenのスタートに並びました。雨も雷鳴も込みです。良いことのために走るという動機は、悪天候でもランニングシューズの紐を結ぶのに十分でした。",{"lang":790,"date":1315,"categories":1316,"blogtitlepic":1317,"customExcerpt":1318},"2026-06-08",[1220],"frankfurter-runden.png","同僚11人、16周、160キロ、雷雨、そして表彰台。glueckkanjaはFrankfurter Runden 2026に参加し、走った1周ごとにVAIR e.V.へ寄付しました。同団体はオフェンバッハでインクルーシブなスポーツ・カルチャーパークを建設しています。","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1322,1292,1323],"Top Arbeitgeber","Soziales Engagement",{"id":1325,"title":1326,"author":1327,"cta":494,"description":1328,"hideInRecent":484,"layout":788,"meta":1329,"moment":1330,"path":1334,"stem":1335,"tags":1336,"webcast":484},"content_ja/posts/2026-04-10-incident-to-intelligence.md","未知のAMOSスティーラーの解剖：アラートから免疫獲得まで数時間",[1095],"当社のSOCでアラートが発報すると、そこから時計が動き始めます。対象となったお客様だけでなく、当社の保護下にあるすべての組織にとってです。現代の脅威環境で最も危険な瞬間はインテリジェンス・ギャップ、つまり新しいマルウェア亜種が最初に投入されてから、業界がその存在を知る日までの時間の窓です。",{"lang":790,"date":1330,"categories":1331,"blogtitlepic":1332,"customExcerpt":1333},"2026-04-10",[235],"head-amos-stealer.png","これまで文書化されていなかったAMOSスティーラーの亜種が、macOSエンドポイントを侵害しました。既知のハッシュはなく、公開データベースにC2データもありません。当社のSOCは6層の難読化を解体し、すべての指標を抽出したうえで、業界がこの検体を目にするよりも前に、数時間以内ですべてのSOCのお客様へ保護を配布しました。","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1337,1338,1339,1340,1341],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1343,"title":1344,"author":1345,"cta":494,"description":1346,"hideInRecent":484,"layout":788,"meta":1347,"moment":1348,"path":1351,"stem":1352,"tags":494,"webcast":484},"content_ja/posts/2026-03-21-microsoft-edge-corporate-browser.md","Edgeを唯一の社内標準ブラウザーにすべき理由",[885],"企業環境におけるブラウザーの選定は戦略的な判断です。セキュリティの水準と運用の手間を直接左右します。長らくGoogle Chromeが自然な選択肢でしたが、Microsoft Edgeは既存のスタックに直接組み込まれるブラウザーへと進化しました。特にMicrosoft 365を利用し、管理をIntuneで行っている環境ではその効果が大きくなります。",{"lang":790,"date":1348,"blogtitlepic":1349,"customExcerpt":1350},"2026-03-21","head-microsoft-edge-default-browser.jpg","Chromeを本気で選んだ企業はほとんどありません。独自の同期ロジック、独自のアカウント管理、独自のポリシー画面を抱えたまま、ただそこにあっただけです。一方でMicrosoft Edgeは、すでに動いているインフラ、つまりEntra ID、Intune、Defenderに直接組み込まれます。本記事では、移行がどのようなものか、IntuneのポリシーでどのようにChromeをランディングページへリダイレクトするか、そして2つのブラウザーを並行運用するのをやめると何が不要になるかを紹介します。","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1354,"title":1355,"author":1356,"cta":494,"description":1357,"hideInRecent":484,"layout":788,"meta":1358,"moment":1359,"path":1363,"stem":1364,"tags":1365,"webcast":484},"content_ja/posts/2026-03-20-stryker-attack-intune-privilege.md","必要だったのは管理者アカウント1つだけでした",[989],"2026年3月11日水曜日。79か国のStrykerのオフィスで従業員がPCの電源を入れると、中身は空でした。ログイン画面はロゴに置き換わっていました。社用ノートPC、社用スマートフォン、そして同社のBYODプログラムに登録されていた私物端末まで、すべてが一夜のうちに同時に消去されました。ランサムウェアもマルウェアのシグネチャも、エンドポイント検知ツールが捉えられるものは何もありませんでした。",{"lang":790,"date":1359,"categories":1360,"blogtitlepic":1361,"customExcerpt":1362},"2026-03-20",[235],"head-stryker.jpg","2026年3月11日、Handalaは79か国の端末を消去しました。そのために必要だったのは、侵害されたIntuneの管理者アカウント1つだけです。マルウェアもエクスプロイトもなく、正規の管理ツールが所有者自身に向けられました。何が起きたのか、なぜそれが通用したのか、そして塞ぐべき2つのアーキテクチャ上の穴について説明します。","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[1366,71,1209,1210],"Red Tenant",{"id":1368,"title":1369,"author":1370,"cta":494,"description":1371,"hideInRecent":484,"layout":788,"meta":1372,"moment":1373,"path":1377,"stem":1378,"tags":1379,"webcast":484},"content_ja/posts/2026-03-16-ai-agent-hackathon.md","6つのAgent。4週間。実際の運用へ。",[1016],"自社のIT部門は、Agentなら数分で片づく作業に毎週何時間を費やしているでしょうか。",{"lang":790,"date":1373,"categories":1374,"blogtitlepic":1375,"customExcerpt":1376},"2026-03-16",[1220],"head-ai-agent-hackathon.jpg","6社、4週間のビルドフェーズ、6つの動作するAI Agent。これが第1回glueckkanja AI Agent Hackathonの成果です。Kiekert、Dr. Oetker、Eckes-Granini、igefa、lila logistikがCopilot StudioでAgentを構築し、それらは現在すでに本番で稼働しています。そこで何が生まれ、この形式がどのように機能するのかを紹介します。","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1253,1380,1381,1382],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1384,"Fritz Zurhorst":1385,"Nadine Klein":1386,"Jan Geisbauer":1387,"Carolin Kanja":1391,"Anna Ulbricht":1392,"Annette Brauns":1393,"Pascal Asch":1394,"Steffen Schwerdtfeger":1395},{"display_name":523,"avatar":855,"permalink":856,"twitter":857,"linkedin":858,"imageOffsetTop":859,"imageOffsetLeft":860},{"display_name":829,"avatar":830,"permalink":831,"linkedin":832,"imageOffsetTop":833},{"display_name":849,"avatar":850,"permalink":851,"twitter":852,"linkedin":853,"imageOffsetTop":833},{"display_name":989,"avatar":990,"permalink":991,"twitter":992,"linkedin":992,"imageOffsetTop":833,"socials":1388},[1389,1390],{"text":995,"href":996},{"text":998,"href":999},{"display_name":1016,"avatar":1017,"permalink":1018,"twitter":1019,"linkedin":1020},{"display_name":1107,"avatar":1108,"permalink":1109,"linkedin":1110,"imageOffsetTop":1111,"imageOffsetLeft":1112},{"display_name":1114,"avatar":1115,"permalink":1116,"linkedin":1117,"imageOffsetTop":1118,"imageOffsetLeft":859},{"display_name":1095,"avatar":1096,"permalink":1097,"linkedin":1098,"imageOffsetTop":932},{"display_name":885,"avatar":886,"permalink":887,"linkedin":888,"twitter":889,"imageOffsetTop":890,"imageOffsetLeft":891},{"id":824,"extension":825,"meta":1397,"stem":8,"__hash__":1176},{"Karsten Kleinschmidt":1398},{"display_name":523,"avatar":855,"permalink":856,"twitter":857,"linkedin":858,"imageOffsetTop":859,"imageOffsetLeft":860},1791383938126]