Entra ID
AI summary
The Entra ID connector inventories your Microsoft Entra ID environment, collecting details about application registrations, enterprise applications, credentials, devices, and sign-ins. It includes 14 policies that automatically flag security issues like expired certificates or missing owners, and 4 report templates to help you analyze access permissions and risky sign-ins.
The Entra ID connector brings Microsoft Entra ID into Rencore Governance. It inventories application registrations, enterprise applications, client secrets, certificates, OAuth2 permission grants, directory roles, devices, domains and risky sign-ins.
Inventory
The objects Rencore Governance collects for Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more, and how to search, segment and extend them.
Object types 22
- Registration certificate
- Client secret
- Application registration
- App role assignment
- App role
- Deleted app registration certificate
- Deleted app client secret
- Deleted application registration
Show 14 more
- Deleted application verified publisher
- Device
- Directory role
- Domain
- Enterprise registration certificate
- Enterprise app client secret
- Enterprise application verified publisher
- Enterprise application
- Enterprise application OAuth2 permission scope
- OAuth2 permission grant
- OAuth2 permission scope
- Risky Entra ID sign-in
- User registration credential
- Verified publisher
Policies
Rules that check your inventory and flag violations.
Policies 9
- Applications with client secrets that are about to expire
- Applications with expired certificates
- Applications with expired client secrets
- Application registrations without owners
- Enterprise applications without owners
- Enterprise applications (SharePoint add-ins) with certificates or client secrets
- Applications with certificates that are about to expire
- Devices with disabled user accounts
- Enterprise applications (SharePoint add-ins) with expired certificates or client secrets
Access & sharing
Who can reach what: permissions, guests, external access and sharing.
Use cases: Clean up after leavers
Reports
Create, share and export reports on your inventory.
Use cases: Report and prove compliance
How-to guides
- Inventory guides (18 pages)
- Policies guides (15 pages)
- Reports guides (11 pages)
Permissions and consent
Frequently asked questions
Can Rencore Governance find expiring app secrets in Entra ID?
Can Rencore Governance find expiring app secrets in Entra ID?Yes. Policies flag applications with client secrets or certificates that are about to expire and those that have already expired, including SharePoint Add-Ins registered as enterprise applications.
Which app permissions does Rencore Governance check?
Policies flag enterprise applications that use Microsoft Graph, SharePoint Online or Exchange Web Services permissions, and those with Full Control or Write permissions.
Which permissions does the Entra ID connector need?
Which permissions does the Entra ID connector need?Rencore Governance reads Entra ID through application permissions you consent to in Microsoft Entra ID. The connector's Permissions and consent section links every Microsoft Permissions entry that covers Entra ID.
What does Rencore Governance cover for Entra ID?
What does Rencore Governance cover for Entra ID?22 object types and 14 policies.
Which module includes the Entra ID connector?
Which module includes the Entra ID connector?The Entra ID connector is part of the Digital Workplace module of Rencore Governance, which every Plan includes. The connector is generally available.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?