I'm curious what other organizations struggle with most.

In the environments I've worked with, the biggest challenges aren't authentication or MFA anymore. It's governance after access has already been granted.

Things like:

• Nobody knows who owns an application.
• Hundreds of security groups with no clear purpose.
• Access reviews only happen before an audit.
• Standing privileged access that nobody questions anymore.
• Employees not knowing what they can actually request.

If you could change one thing about Microsoft Entra Governance tomorrow, what would it be?

A new DLP rule is available to control sharing of SharePoint and OneDrive files with selected domains and email addresses. The new rule supports an allow list (permit sharing) and can also specify a deny list (block sharing). The user interface takes a little getting used to, but when everything is configured and SharePoint has had a chance to respond to the block, the rule works and any attempt by a blocked user to use a sharing link is refused.

https://office365itpros.com/2026/07/22/block-sharing-dlp-sharepoint/