Identity and Access
Microsoft Entra ID
Microsoft cloud identity and access platform for users, groups, authentication, applications, Conditional Access, sign-in evidence, identity posture, and privilege governance.
Key points
- Conditional Access is the Zero Trust policy engine
- Sign-in and audit logs answer different questions
- PIM reduces standing privilege
When to use it
- Require MFA based on access context
- Investigate a failed or risky sign-in
Exam tips
- Authentication is not authorization
- Use the tenant service principal for enterprise-app governance