Automate user Reprocess in Entra ID Governance Entitlement Management using Sentinel and PowerShell

Access packages in Entra ID Governance are a great way to bundle resources together and then provide a user or multiple users access to these resources or access to resources via security groups. But what happens when a user gets removed from a security group that is part of an access package? The answer to … Read more

Monitoring access package delivery status in Entra ID Governance

A few days ago, I received a ticket regarding three users from the same department who were missing access to an application. I knew this application was assigned to them through an access package. Since all three were new users, I wondered what had happened when the access package was assigned. The first thing I … Read more

Using Entra ID Governance and Sentinel to assure user alignment with HR data

Have you ever asked yourself this question after setting up Microsoft Entra ID Lifecycle Workflows and API-driven user provisioning: “What happens if one of my colleagues changes a user attribute in Active Directory (AD), will Entra ID Governance correct it?” The answer to this question is: “No, it won’t”. Or like an IT consultant would … Read more

Monitor Lifecycle Workflows status in Entra ID Governance

A few days ago, I was doing some maintenance on my company’s Lifecycle Workflows and discovered that one of the Lifecycle workflows had the same failed task every time the Lifecycle workflow had run. The task is a Custom Extension task (PowerShell based). This got me thinking about how I could get a notification when … Read more

Securing Service Principals in Microsoft Entra ID with Conditional Access policies

Service Principals in your Microsoft cloud environment has long been a nice and convenient way to provide access to resources like SharePoint Online, Entra ID, Microsoft Graph or Azure resources by using a secret (password) or a certificate, and by then combining it with the client ID (username) for the Service Principles to be able … Read more