AppGov Score Blog

In a previous blog post, 'How to Restrict Microsoft Graph API Access to Mailboxes,' we explained why scoping your app registration permissions in...

Your Microsoft Entra ID application estate is already part of your attack surface – whether you’ve mapped it or not. In Microsoft 365 environments,...

Modern identity security is not about managing credentials; it is about designing trust boundaries between identity providers and relying parties....

Identity security is going through a reckoning. Organizations spent the last decade hardening user logins with MFA, Conditional Access, and...

Assigning ownership to your application and service principal objects in Entra ID might seem like good governance, but it introduces significant...

Cleaning up applications in Microsoft Entra ID (formerly Azure AD) is a critical part of application governance. Without the right data and process,...

Backup applications are designed to protect your data, but when over-permissioned, they can become high-value targets for threat actors. I’ve been...

In Microsoft Entra ID, enterprise applications without assigned owners, often referred to as "ownerless apps" pose significant risks to...

In today’s enterprise environments, Microsoft Entra ID is at the heart of access, identity, and application connectivity. But with hundreds or...

In part 1 of this blog series, we discussed what workload identities are, their risks, and the consequences they cause if not monitored. In this blog...