entra-id
Microsoft Entra ID
Microsoft Entra ID (formerly Azure Active Directory) is the cloud identity and access management service that authenticates users, devices, and workloads. It is the control plane for Zero Trust and the foundation every other Microsoft security control assumes is healthy.
When to use
Establishing the identity foundation: tenants, users/groups, authentication methods, SSO for apps, and hybrid identity with on-premises Active Directory. Use this skill before configuring Conditional Access, Identity Protection, or PIM - they all assume a clean Entra ID baseline.
Do not use this skill for risk-based sign-in detection (entra-id-protection), policy
enforcement (conditional-access-mfa), just-in-time admin roles (azure-pim), or lifecycle
workflows (entra-id-governance).