AppGov Score Blog

The app onboarding process spectrum: simple or self-inflicted complexity

Onboarding an application, whether it's an internally registered service...

Managing application governance in Microsoft Entra ID has become increasingly difficult for organizations operating large Microsoft 365 environments....

In a previous blog post, 'How to Restrict Microsoft Graph API Access to Mailboxes,' we explained why scoping your app registration permissions in...

Your Microsoft Entra ID application estate is already part of your attack surface – whether you’ve mapped it or not. In Microsoft 365 environments,...

Modern identity security is not about managing credentials; it is about designing trust boundaries between identity providers and relying parties....

Identity security is going through a reckoning. Organizations spent the last decade hardening user logins with MFA, Conditional Access, and...

Assigning ownership to your application and service principal objects in Entra ID might seem like good governance, but it introduces significant...

Cleaning up applications in Microsoft Entra ID (formerly Azure AD) is a critical part of application governance. Without the right data and process,...

Backup applications are designed to protect your data, but when over-permissioned, they can become high-value targets for threat actors. I’ve been...

In Microsoft Entra ID, enterprise applications without assigned owners, often referred to as "ownerless apps" pose significant risks to...