CrowdStrike expands its Falcon Identity Protection with new capabilities for real-time Entra ID protection and just-in-time access for privileged actions.

CrowdStrike has enhanced its Falcon Identity Protection with real-time protection for Microsoft Entra ID and just-in-time access for privileged actions. These features help organizations prevent identity-related threats and strengthen the security of their systems.

Microsoft Entra ID

CrowdStrike is addressing the growing number of identity threats with the latest innovations from Falcon Identity Protection. CrowdStrike introduces real-time threat prevention specifically for Microsoft Entra ID, which is used by many organizations as an identity provider, to prevent attacks such as password spoofing and advanced phishing.

Falcon Identity Protection works by integrating with the Entra ID authentication flow. Based on user behavior and risk-based decisions, unauthorized devices are blocked and attacks are stopped before they can cause damage. The solution leverages data from the CrowdStrike Falcon platform, such as risk scores and device trust, supplemented by information from systems like Intune and Entra ID. This ensures that access is granted or blocked based on real-time risk assessments.

Just-in-time access

In addition to the improvements to Entra ID, CrowdStrike is also introducing just-in-time access for privileged actions, ensuring that users are only granted access when absolutely necessary, reducing the risk of privileged account misuse.

Another key improvement is hybrid risk-based access control. This enhancement leverages the OpenID Connect standard, meaning organizations can secure both their on-premises Active Directory and their cloud-based Entra ID. Depending on the current threat level, access may be blocked or additional authentication may be required.

With these updates, CrowdStrike offers an integrated solution that combines identity security and endpoint protection so organizations can detect and stop threats faster.