Entra Application Management

Challenge

With dozens of apps connected to Entra ID, the organization needed structured governance over app lifecycle, permissions, and automation. The goal was to eliminate stale apps, enforce least privilege, and enable secure automation without interactive prompts.

Tools & Technologies

• Microsoft Entra Admin Center
• Microsoft Graph API Permissions
• Application Registration & Enterprise Apps
• Certificate & Secret Management
• 1Password Vault (for secret storage)
• SSO Protocols: SAML, OIDC, OAuth

Implementation

1. Audited and removed stale or unused applications from Entra
2. Created new app registrations for SSO and automation scenarios
3. Assigned Graph API permissions (delegated and application-level)
4. Managed user assignment and role-based access to apps
5. Generated and rotated certificates and client secrets for secure access
6. Stored secrets in 1Password Vault for secure retrieval
7. Enabled certificate-based auth for automation without MFA prompts

Architecture Diagram

This placeholder diagram will be replaced with the final version:

Impact