Register for HIPConf26 Today!

The Entra ID Recovery Gap with Tim Wolf and Tim Springston, Semperis

 
July 07, 2026

This episode features Tim Wolf, Senior Solutions Architect at Semperis, and Tim Springston, Principal Product Manager for Recovery Solutions at Semperis.

Tim Wolf spent years as a Microsoft Premier Field Engineer helping enterprise customers architect identity solutions at scale. Tim Springston brings 25 years in identity and security and served as Microsoft’s product manager for Azure AD recoverability, including direct involvement in building the Entra ID shared responsibility model documentation.

In this episode, they walk through what the shared responsibility model actually means for Entra tenant data, how token-based attacks sidestep phishing-resistant authentication, and what happens when a threat actor hard-deletes objects and locks you out.

They examine where Microsoft’s new Entra ID Identity Resilience Recovery feature stops short, and why planning your recovery before anything goes wrong is the only call to action that matters.

See Other Podcasts
Practice Makes Progress in Cyber Resilience with Jim Bowie, VP and CISO at Tampa General Hospital
Practice Makes Progress in Cyber Resilience with Jim Bowie, VP and CISO at Tampa General Hospital

This episode features Jim Bowie, VP and CISO at Tampa General Hospital, joined by co-host Courtney Guss, Director of Crisis Management at Semperis. He discusses why healthcare is uniquely exposed during cyber incidents, why recovery is where most organizations are losing time, and how disciplined rehearsal is the highest-leverage move available to resource-constrained security teams.

Agentic AI and the Authorization Gap No One Closed with Geoffrey Mattson, CEO of SecureAuth
Agentic AI and the Authorization Gap No One Closed with Geoffrey Mattson, CEO of SecureAuth

This episode features Geoffrey Mattson, CEO of SecureAuth, joined by co-host Sarah Cecchetti, Director of Product Management at Semperis. He discusses why agentic …

Where Gartner Sees Identity Security Heading with Mark Diodati, Managing VP of IAM at Gartner
Where Gartner Sees Identity Security Heading with Mark Diodati, Managing VP of IAM at Gartner

In this episode, Mark explains how Gartner's research model works and what his team is prioritizing across identity verification, authorization, ITDR, and decentralized identity. He also breaks down what AI means for identity right now and why securing AI agents is harder than most teams realize.

Why Identity Security Needs Its Own Program with Angie Klein, IAM Business Technology Manager at Federated Insurance
Why Identity Security Needs Its Own Program with Angie Klein, IAM Business Technology Manager at Federated Insurance

In this episode, Angie dives into the organizational and cultural work that most identity programs skip. She shares why identity deserves its own program, how to apply OCM to bring resistant stakeholders on board, and why governance must come first. Angie's core argument is that if identity security creates too much friction, people will route around it, and that's where the real risk lives.

Securing Non-Human Identities in the Age of Agentic AI with Sarah Cecchetti, Director of Product Management at Semperis
Securing Non-Human Identities in the Age of Agentic AI with Sarah Cecchetti, Director of Product Management at Semperis

This episode features Sarah Cecchetti, Director of Product Management at Semperis. A veteran identity executive, Sarah co-founded IDPro and co-authored NIST SP 800-63-3C Digital Identity Guidelines. She previously led Amazon Cognito as Head of Product at AWS, where she also open-sourced Cedar, the policy language at the center of this conversation.

1 Thing to Do to Avoid a Breach: 5 Identity Experts Answer
1 Thing to Do to Avoid a Breach: 5 Identity Experts Answer

This episode features a virtual roundtable hosted by Michele Crockett, Associate VP of Product Marketing at Semperis.

Governance After the Fact: The Hidden Risk of App Sprawl with Sander Berkouwer and Raymond Comvalius, Microsoft MVPs
Governance After the Fact: The Hidden Risk of App Sprawl with Sander Berkouwer and Raymond Comvalius, Microsoft MVPs

This episode features Sander Berkouwer and Raymond Comvalius, two longtime identity security experts and Microsoft Most Valuable Professionals (MVPs). With decades of experience in …

130 MPH Decisions: What Drag Racing Teaches About Incident Response with Krista Arndt
130 MPH Decisions: What Drag Racing Teaches About Incident Response with Krista Arndt

With a career spanning healthcare, finance, crypto, and the Department of Defense, Krista brings a uniquely nontraditional path into cybersecurity, …

Is Active Directory Dead? The Future of Microsoft AD with Cliff Fisher
Is Active Directory Dead? The Future of Microsoft AD with Cliff Fisher

This episode features Cliff Fisher, Senior Solutions Architect at Semperis and former Senior Technical Program Manager on Microsoft’s Active Directory …

How a Single Breach Can Turn into a Full Compromise with Tim Beasley, Senior Incident Response Consultant at Semperis
How a Single Breach Can Turn into a Full Compromise with Tim Beasley, Senior Incident Response Consultant at Semperis

In this episode, Tim Beasley, a Senior Incident Response Consultant at Semperis explains why gaining access is only the beginning of modern attacks and why identity remains the primary path for escalation. He breaks down how attackers exploit credential exposure and identity infrastructure, and why prevention alone fails without a recovery-first mindset. He shares real-world lessons from incident response and recovery, including how teams contain threats and limit the impact of identity compromises.

Learn More