Microsoft Entra ID

Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud-based identity and access management service. It sits behind Microsoft 365, Azure and most modern SaaS environments, handling authentication, authorisation, conditional access and identity governance across users, devices and applications.

Category: Identity & Access Management

What the guide covers

• Conditional Access and MFA configuration

• Privileged role protection and Privileged Identity Management (PIM)

• Sign-in risk and identity protection policies

• Guest access, app permissions and external sharing controls

Official hardening guide

• Configure Microsoft Entra for Increased Security

See also

• Security Best Practices

• Security Operations Guide

• CISA SCuBA Baseline for Entra ID