The AirGap Blueprints · A Cloud Security Strategy Guide
To followIn Case of Emergency, Break Glass
A Practical Guide to Break-Glass Emergency Access Accounts in Microsoft Entra ID
Notify me when it's out
Why this book
When MFA, Conditional Access or federation fails, someone still has to get into the tenant. This guide covers emergency access accounts end to end: how many to keep, how to protect them, how to exclude them safely, and how to know the moment one is used.
Who it's for
- Administrators responsible for tenant-wide sign-in policies
- Security teams writing an incident and recovery plan for Entra ID
- Anyone who has ever locked themselves out of Conditional Access
What's inside
- Why every tenant needs emergency access, and what it must survive
- Designing the accounts: how many, cloud-only, and how they authenticate
- Excluding them from policy without creating a gap
- Storing credentials so they are available, but never casually
- Alerting on every sign-in and testing the accounts on a schedule
- The runbook: who uses them, when, and what happens after
Built like every AirGap Blueprint
- Rationale
- Planning
- Implementation
- Adoption
Each guide takes one control from why it matters to running it in production, with the decisions, settings and review cadence written down — not just the clicks.
