Entra Suite: The Good, The Bad, and The Ugly
Details
This is a Lunch and Learn Session - Bring your lunch and beverage of choice and join us online,
Microsoft Entra has evolved from a single identity platform into a complex suite of interconnected security, governance, and access services — but with power comes complexity. This session takes an unfiltered look at the real-world strengths, gaps, and pitfalls of working with the Entra Suite in production environments.
You’ll learn:
- The Good: How Entra ID, Permissions Management, and Verified ID bring unified access governance, least privilege enforcement, and identity-driven zero trust.
- The Bad: Where Entra’s sprawl introduces operational friction — licensing confusion, overlapping feature sets, and inconsistent experiences between portals, APIs, and logs.
- The Ugly: Real-world misconfigurations and architectural anti-patterns — from overprivileged service principals to non-federated app access and audit blind spots that attackers love.
We’ll also explore:
- How to design a clean identity architecture that scales across multi-cloud and hybrid workloads.
- Practical ways to integrate Entra Permissions Management, Workload ID, and ID Governance into DevSecOps pipelines.
- Tools and scripts for monitoring, auditing, and remediating Entra environments using Microsoft Graph, KQL, and PowerShell.
By the end, you’ll understand not only how to harness the full potential of the Entra Suite — but also how to avoid the traps that can turn your Zero Trust strategy into Zero Visibility.