Awesome Entra

A curated list of awesome Microsoft Entra tools, guides, and other resources.

Newsletter

Entra.News - Weekly round up of the latest Microsoft Entra news from Microsoft and the community.

Mind Map

Microsoft Entra Mind Maps - Visual representation of Microsoft Entra and its components with links to docs. Includes Entra Roles mindmap.

Entra Learning Hubs

Global Secure Access - Resource Hub - Knowledge hub for all things GSA maintained by the GSA Customer Experience Engineering team.

aka.ms & cmd.ms

cmd.ms/portals/azuread - Complete list of shortcuts to blades in the Entra portal.
aka.ms/commands - List of common Microsoft short links.
msportals.io - Links to all Microsoft admin portals.
aka.ms/entratemplates - Email templates & posters to roll out Microsoft Entra features like MFA, SSPR, and more.
aka.ms/entraidac - Microsoft Entra ID Admin Center
aka.ms/myapps - My Apps
aka.ms/myaccount - My Account
aka.ms/my-groups - My Groups
aka.ms/my-access - My Access Packages
aka.ms/mystaff - My Staff
aka.ms/mysecurity, aka.ms/mysecurityinfo - My Security Info
aka.ms/mysignins - My Sign-ins
aka.ms/pim - Privileged Identity Management - Roles
aka.ms/pimg - Privileged Identity Management - Groups
aka.ms/pimr - Privileged Identity Management - Roles
aka.ms/pimz - Privileged Identity Management - Azure Resources
aka.ms/sspr - Self Service Password Reset
aka.ms/mfasetup - Alternative for My Security Info
aka.ms/entradocs - Microsoft Entra Technical Documentation
aka.ms/graphref - Microsoft Graph REST API Reference - v1.0
aka.ms/graphrefbeta - Microsoft Graph REST API Reference - Beta

Tools

Microsoft Product Downloads

CLI

365AutomatedLab - Create a Microsoft 365 Test Environment using a test data from an Excel workbook.
AADInternals - PowerShell toolkit for administering and hacking Azure AD and Microsoft 365.
AzADServicePrincipalInsights - Insights and change tracking on Service Principals/ Applications and Managed Identities (outputs html, csv, json).
Azure AD Assessment aka.ms/AzureADAssessmentTools - Guidance to assess the health of an Azure AD tenant and provide best practice guidance / recommendations.
Azure-AccessPermissions - Script to enumerate access permissions in an Azure Active Directory environment
AzureADTenantID - PowerShell module to retrieve the TenantID for an Azure AD Tenant.
AzurePrivilegedIAM - Docs and samples for privileged identity and access management in Microsoft Azure and Microsoft Entra
AzurePasswordProtectionCalculator - Calculator for Azure Password Protection
BadZure - A tool to simulate common Entra security misconfigurations.
BloodHound - BloodHound uses graph theory to reveal hidden relationships and attack paths in an Active Directory environment that would otherwise be impossible to quickly identify.
CA Optics - Conditional Access gap analyzer
ConditionalAccessDocumentation - PowerShell module to document Conditional Access policies in Excel.
DCToolbox - Collection of tools for Conditional Access automation, what-if simulation and more.
EasyPIM - Manage PIM Azure Resource role and assignment with ease.
Entra Exporter aka.ms/EntraExporter - PowerShell module that exports all the config and data of a Microsoft Entra tenant.
Entra Export Template - Workflows for scheduled export of settings from an Entra tenant.
Evilginx - Man-in-the-middle attack framework
family-of-client-ids-research - Research into Undocumented Behavior of Azure AD Refresh Tokens
Graph PowerShell Sample Script Repository - aka.ms/graphsamples - Community contributed repository of common Graph PowerShell scripts
GraphRunner - A Post-exploitation Toolset for Interacting with the Microsoft Graph API
MicroBurst - PowerShell Toolkit for Attacking Azure.
Microsoft365DSC - Manages, configures, extracts and monitors Microsoft 365 tenant configurations using PowerShell DSC
Microsoft First Party AppNames aka.ms/AppNames - Repository hosting a daily updated csv/json of Microsoft first party app names and their GUIDs (useful for kql queries and scripts).
Microsoft-Cloud-Group-Analyzer - Provides instant insights in what services, policies,... a given group or user is scoped to.
Microsoft-Extractor-Suite - Invictus IR - PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
MicrosoftGraphPS - Version manager for the Graph PowerShell SDK.
MiniGraph - Minimal overhead Microsoft Graph client implementation for lean environment like Azure Functions
MSIdentityTools aka.ms/msid - Collection of useful cmdlets for common Entra functionality.
Ping Castle - Security Assessment Tool
PSMSGraphBatchRequest - PowerShell module to transform data into Microsoft Graph Batch Requests.
PowerZure - PowerShell project created to perform reconnaissance and exploitation of Azure, AzureAD, and the associated resources.
ROADrecon - Tool for exploring information in Azure AD from both a Red Team and Blue Team perspective.
ROPCI - Identify MFA gaps in your Entra configuration that allow API access through ROPC.
ScoutSuite - Multi-Cloud Security auditing tool.
ScubaGear - cisa.gov - PowerShell module developed by CISA to verify M365 tenant configuration confirms to Secure Cloud Business Applications (SCuBA) Security Configuration Baseline.
StormSpotter aka.ms/StormSpotter - Azure Red Team tool for graphing Azure and Azure Active Directory objects.
TokenTactics - Tool to test and demonstrate the impact of token-based attacks on Microsoft Entra.
TokenTacticsV2 - Fork of the great TokenTactics with support for CAE and token endpoint.
Microsoft cloud group analyzer - Sript that provides insights in what services/policies/... a given group or user is scoped to.
EntraOps - Classify, identify and protect your privileges based on Enterprise Access Model
Maester - Automated test framework for conditional access and Entra configuration

Web apps

AADInternals - OSINT - OSINT web app that displays tenant information.
Microsoft Graph Explorer aka.ms/ge - Graph Explorer is a web-based tool to help you understand and test Microsoft Graph APIs.
idPowerToys - Microsoft Entra related power toys including a Conditional Access visualizer and Entra mind maps.
SCIM Playground - SCIM Playground is a web-based tool to help you understand and test SCIM APIs.
Conditional Access Blueprint - Four tools to model and create CA policies.

Log Analytics, KQL, Logic Apps...

Entra ID Security Config Analyzer (EIDSCA) - Monitor Entra ID security configuration using Log Analytics, Azure Workbook and Sentinel.
Hunting Queries & Detection Rules - Azure Active Directory
Automatically Exclude BreakGlass Group From Conditional Access - Logic App to automatically exclude a BreakGlass group from Conditional Access policies.
EntraID-Group-Cleanup - Azure Runbook to automatically remove users from a group based on time of membership (e.g. 30 days).
EntraID-MFA-DynamicGroup - Azure Runbook to automatically add users to a group based on MFA status.

Certifications

Microsoft Certified: Identity and Access Administrator Associate

Community

Reddit /r/Entra - Subreddit for discussing Microsoft Entra.
Discord discord.entra.news - Discord server for discussing Microsoft Entra.
Slack - MacAdmins #microsoft-entra channel - Slack channel for discussing Microsoft Entra related to Apple devices.
LinkedIn Group - Microsoft Entra - LinkedIn group for discussing Microsoft Entra.