关于这一集
Sam and Joe discuss Microsoft's plan to retire Microsoft-provided SMS and voice calls for MFA, with key dates of Sept 1, 2026 (users on SMS/voice are automatically enabled for passkeys and nudged to register) and Feb 1, 2027 (blocking enforcement for users whose only MFA is SMS/voice, no opt-out), noting paid/customer-managed telecom options and the need to warn clients, address legacy per-user MFA vs conditional access, and handle shared accounts via shared mailboxes or passkey-sharing tools. Sam recounts a prolonged Salesforce SSO/MFA issue worsened by poor vendor documentation and misleading AI guidance, ultimately tied to a Microsoft KB update. They then cover partnering with Fuji for client SOC 2 compliance support, emphasizing evidence, audits, costs, and ongoing maintenance, plus how cyber-insurance questionnaires drive security improvements. The episode also touches on residential support cases, Vision Pro support challenges with DRM blocking screen mirroring, and show wrap-up.
00:00 Show Kickoff
00:17 Microsoft MFA SMS Retirement
00:44 Key Dates and User Impact
03:28 Authenticator Backups and PSAs
04:40 Legacy MFA Cleanup Challenges
07:36 Conditional Access Licensing Risks
10:12 Shared Accounts and Passkeys
12:21 Salesforce MFA SSO Headaches
13:25 AI Missteps and Vendor Docs
17:50 SOC 2 Help from Fuji
21:23 SOC 2 Costs and Maintenance
22:49 Easy Buttons and Real Audits
26:27 Cyber Insurance Questionnaires
27:53 Partnering for Expertise
29:07 Cyber Insurance Foot in Door
30:31 Apple Store Referral Win
31:01 Lightroom Migration Pitfalls
34:31 Blocked Contacts Mystery
38:04 Email Search and User Training
40:02 Supporting Vision Pro Clients
47:28 Amazon Returns and Exceptions
50:24 Wrap Up and Callouts
