AppGov Score Blog

Do you know exactly how many credentials are live in your Entra ID tenant right now? Not roughly. Not "IT's got a handle on it." Exactly. Give me the...

Logic Apps are excellent for automation, but when they handle identity, the design must go beyond simply "it works." In this post, we'll show you how...

What Is Application Offboarding?

Offboarding is the deliberate, controlled retirement of an application identity,an app registration, an enterprise...

The app onboarding process spectrum: simple or self-inflicted complexity

Onboarding an application, whether it's an internally registered service...

Managing application governance in Microsoft Entra ID has become increasingly difficult for organizations operating large Microsoft 365 environments....

The report that is nearly right...

In a previous blog post, 'How to Restrict Microsoft Graph API Access to Mailboxes,' we explained why scoping your app registration permissions in...

Your Microsoft Entra ID application estate is already part of your attack surface – whether you’ve mapped it or not. In Microsoft 365 environments,...

Modern identity security is not about managing credentials; it is about designing trust boundaries between identity providers and relying parties....

Identity security is going through a reckoning. Organizations spent the last decade hardening user logins with MFA, Conditional Access, and...