Entra ID from scratch

Identity is the plane every other Microsoft 365 decision runs through. This path walks the concepts, the join model, and the operational patterns.

For: New Entra / M365 identity admins.

11 guides in this path

  1. 1
    Entra Connect vs Entra Cloud SyncThe two ways to sync on-prem Active Directory to Entra ID — what each does, the scenarios that still force the old tool, and which to use today.
  2. 2
    Entra ID groups and group-based licensingGroup types in Entra ID, dynamic groups, and using groups to assign licences automatically.
  3. 3
    Entra ID Administrative UnitsAdministrative Units scope admin roles to subsets of the directory — for delegated administration without tenant-wide privileges.
  4. 4
    Entra ID Conditional Access designDesigning a Conditional Access baseline — policies, principles, the order they should be written in, and the operational habits that keep the estate healthy over time.
  5. 5
    Testing Conditional Access policiesHow to test Conditional Access policies before enforcing them — report-only mode, what-if, and rollout patterns.
  6. 6
    Conditional Access break-glass account designHow to design break-glass accounts that survive every Conditional Access disaster — credentials, monitoring, and recovery.
  7. 7
    Entra ID passwordless authenticationThe realistic options for going passwordless in Microsoft 365 — Authenticator, FIDO2, Windows Hello, and passkeys.
  8. 8
    Entra ID self-service password resetSSPR lets users reset their own passwords without calling the help desk. Here's the configuration and rollout.
  9. 9
    Entra ID Privileged Identity ManagementPIM turns standing admin access into just-in-time, approval-gated activation. The model, what it covers, role settings that work, and a rollout that sticks.
  10. 10
    Entra ID Lifecycle WorkflowsLifecycle Workflows automate joiner-mover-leaver tasks based on user attribute triggers.
  11. 11
    Entra ID B2B guest accessHow Entra ID B2B brings external users into your tenant as guests — invitations, controls, and lifecycle.
← All pathsBrowse all guides →