Microsoft Entra ID
Qu'est-ce que Microsoft Entra ID ?
Microsoft Entra IDMicrosoft's cloud identity service — formerly Azure Active Directory — providing identity, single sign-on, MFA, Conditional Access, and external-identity capabilities for Microsoft 365 and millions of integrated SaaS applications.
Microsoft Entra ID is the rebrand of Azure Active Directory, announced in July 2023 and rolled out through 2023–2024. As a product it is essentially unchanged: the same cloud identity, authentication, and authorization service backing Microsoft 365, Azure, and millions of integrated SaaS applications. The Entra brand also covers a broader family — Entra ID Governance (formerly Azure AD Identity Governance), Entra Verified ID (decentralized identifiers), Entra Permissions Management (CIEM), Entra Internet Access and Entra Private Access (SSE/ZTNA). The naming change is operationally important because it appears throughout documentation, MSGraph endpoints (still `graph.microsoft.com`), Conditional Access UIs, audit logs, and security tooling — meaning anyone writing detections, runbooks, or training has had to migrate terminology. From a security perspective Entra ID is the de facto IdP for most enterprises, and its primary attack surfaces are well known: consent phishing, device-code phishing, OAuth-token theft, Pass-the-PRT, Golden SAML against AD FS, and Storm-0558-style key compromise. Conditional Access, FIDO2-only sign-in policies, and Identity Protection are the corresponding defensive controls.
● Exemples
- 01
A Conditional Access policy blocks legacy authentication protocols and requires FIDO2-bound sign-in for all global administrators.
- 02
A SIEM detection updates its data source from 'AzureActiveDirectory' to 'Microsoft Entra ID' but continues to reference the same Graph endpoints and event schema.
● Questions fréquentes
Qu'est-ce que Microsoft Entra ID ?
Microsoft's cloud identity service — formerly Azure Active Directory — providing identity, single sign-on, MFA, Conditional Access, and external-identity capabilities for Microsoft 365 and millions of integrated SaaS applications. Cette notion relève de la catégorie Identité et accès en cybersécurité.
Que signifie Microsoft Entra ID ?
Microsoft's cloud identity service — formerly Azure Active Directory — providing identity, single sign-on, MFA, Conditional Access, and external-identity capabilities for Microsoft 365 and millions of integrated SaaS applications.
Comment fonctionne Microsoft Entra ID ?
Microsoft Entra ID is the rebrand of Azure Active Directory, announced in July 2023 and rolled out through 2023–2024. As a product it is essentially unchanged: the same cloud identity, authentication, and authorization service backing Microsoft 365, Azure, and millions of integrated SaaS applications. The Entra brand also covers a broader family — Entra ID Governance (formerly Azure AD Identity Governance), Entra Verified ID (decentralized identifiers), Entra Permissions Management (CIEM), Entra Internet Access and Entra Private Access (SSE/ZTNA). The naming change is operationally important because it appears throughout documentation, MSGraph endpoints (still `graph.microsoft.com`), Conditional Access UIs, audit logs, and security tooling — meaning anyone writing detections, runbooks, or training has had to migrate terminology. From a security perspective Entra ID is the de facto IdP for most enterprises, and its primary attack surfaces are well known: consent phishing, device-code phishing, OAuth-token theft, Pass-the-PRT, Golden SAML against AD FS, and Storm-0558-style key compromise. Conditional Access, FIDO2-only sign-in policies, and Identity Protection are the corresponding defensive controls.
Comment se défendre contre Microsoft Entra ID ?
Les défenses contre Microsoft Entra ID combinent habituellement des contrôles techniques et des pratiques opérationnelles, comme détaillé dans la définition ci-dessus.
Quels sont les autres noms de Microsoft Entra ID ?
Noms alternatifs courants : Azure AD, Azure Active Directory, AAD.
● Termes liés
- identity-access№ 014
Active Directory
Service d'annuaire d'entreprise de Microsoft pour les réseaux Windows, qui assure l'authentification, l'autorisation et la gestion centralisée des stratégies pour utilisateurs, machines et ressources.
- identity-access№ 1162
Authentification unique (SSO)
Mécanisme d'authentification permettant à un utilisateur de se connecter une seule fois auprès d'un fournisseur d'identité de confiance pour accéder ensuite à plusieurs applications sans ressaisir d'identifiants.
- identity-access№ 839
OAuth 2.0
Cadre ouvert d'autorisation permettant au propriétaire d'une ressource d'accorder à une application tierce un accès limité à une API sans partager d'identifiants.
- identity-access№ 852
OpenID Connect (OIDC)
Couche d'identité construite au-dessus d'OAuth 2.0, permettant aux clients de vérifier l'identité d'un utilisateur et d'obtenir un profil de base via un jeton ID signé.
- identity-access№ 793
Authentification multifacteur (MFA)
Méthode d'authentification exigeant au moins deux facteurs indépendants — généralement de catégories différentes — avant d'accorder l'accès.
- attacks№ 840
OAuth Consent Phishing
An identity attack that abuses the OAuth consent flow: instead of stealing a password, the attacker tricks the victim into granting their malicious app standing permissions (mail.read, files.read.all) on the victim's tenant.