Entra ID
Microsoft's enterprise identity and access management service, formerly known as Azure Active Directory. It provides enterprise-grade identity governance capabilities including single sign-on, conditional access, and multi-factor authentication.
Timeline (last 90 days)
In enterprise scenarios, these permissions are usually configured centrally by administrators through Entra ID (formerly Azure AD) and are constrained by data loss prevention (DLP) and compliance policies.
In the Microsoft Graph permission model, delegated permissions require a signed-in user context, while application permissions are held by the app's own service principal, require no user login or MFA, and often apply to the entire tenant.
UPN (User Principal Name) is the login name used in Microsoft Entra ID to uniquely identify a user account, in a format similar to an email address (such as admin@contoso.com).
To immediately cut off an attacker's access, the correct approach is to revoke or disable the service principal itself rather than merely deleting the key, trigger a revocation of all session tokens in Entra ID, and combine this with conditional access policies to block requests from anomalous sources.
SharePoint's permission system is based on Microsoft Entra ID (formerly Azure Active Directory) identity authentication and is integrated with compliance mechanisms such as Conditional Access policies, DLP, and information barriers.
Scout has its own independent identity, including its own email address, Teams identity, and Entra identity, and can save documents using its own OneDrive.
Microsoft's MCP gateway solution is bound to Entra ID (formerly Azure AD), Microsoft 365, and Azure cloud services.
Okta and Microsoft (Azure AD/Entra ID) account for more than 50% of the IDaaS market.
All Facts (8)
In enterprise scenarios, these permissions are usually configured centrally by administrators through Entra ID (formerly Azure AD) and are constrained by data loss prevention (DLP) and compliance policies.
50%UnverifiedIn the Microsoft Graph permission model, delegated permissions require a signed-in user context, while application permissions are held by the app's own service principal, require no user login or MFA, and often apply to the entire tenant.
50%UnverifiedUPN (User Principal Name) is the login name used in Microsoft Entra ID to uniquely identify a user account, in a format similar to an email address (such as admin@contoso.com).
50%UnverifiedTo immediately cut off an attacker's access, the correct approach is to revoke or disable the service principal itself rather than merely deleting the key, trigger a revocation of all session tokens in Entra ID, and combine this with conditional access policies to block requests from anomalous sources.
50%UnverifiedSharePoint's permission system is based on Microsoft Entra ID (formerly Azure Active Directory) identity authentication and is integrated with compliance mechanisms such as Conditional Access policies, DLP, and information barriers.
50%UnverifiedScout has its own independent identity, including its own email address, Teams identity, and Entra identity, and can save documents using its own OneDrive.
50%UnverifiedMicrosoft's MCP gateway solution is bound to Entra ID (formerly Azure AD), Microsoft 365, and Azure cloud services.
50%UnverifiedOkta and Microsoft (Azure AD/Entra ID) account for more than 50% of the IDaaS market.
50%