US Department of Labor’s journey to Zero Trust security with Microsoft Entra ID

The report describes the U.S. Department of Labor consolidating identity systems onto Microsoft Entra ID, adopting phishing‑resistant authentication (device‑bound passkeys via Microsoft Authenticator), and implementing risk‑based Conditional Access informed by device, sign‑in, and user risk, particularly for privileged accounts. It highlights the use of report‑only mode to refine policies, progress integrating 200+ apps for SSO, and future steps like app attestation, Entra ID device join, and broader passwordless rollout to meet federal security requirements while improving user experience.