AppGov Score Blog

Exchange Web Services (EWS) has been a foundational API for applications accessing Exchange Online, but Microsoft is retiring it in favor of...

The Entra ID Application Lifecycle Playbook: Closing the Governance Gaps Entra Won’t Close for You

Do you know exactly how many credentials are live in your Entra ID tenant right now? Not roughly. Not "IT's got a handle on it." Exactly. Give me the...

Logic Apps are excellent for automation, but when they handle identity, the design must go beyond simply "it works." In this post, we'll show you how...

What Is Application Offboarding?

Offboarding is the deliberate, controlled retirement of an application identity,an app registration, an enterprise...

The app onboarding process spectrum: simple or self-inflicted complexity

Onboarding an application, whether it's an internally registered service...

Managing application governance in Microsoft Entra ID has become increasingly difficult for organizations operating large Microsoft 365 environments....

In a previous blog post, 'How to Restrict Microsoft Graph API Access to Mailboxes,' we explained why scoping your app registration permissions in...

Your Microsoft Entra ID application estate is already part of your attack surface – whether you’ve mapped it or not. In Microsoft 365 environments,...

Modern identity security is not about managing credentials; it is about designing trust boundaries between identity providers and relying parties....