Microsoft Entra ID (formerly Azure Active Directory) is the cloud directory for user accounts, groups, and sign-in policies used by Microsoft 365 and thousands of integrated SaaS apps. Entra ID enables conditional access (require MFA, compliant device), self-service password reset, and hybrid identity when on-premises Active Directory syncs to the cloud. It is the control plane for who may access what. Harden Entra ID by protecting Global Administrator accounts with phishing-resistant MFA, limiting standing admin roles, and reviewing sign-in logs for impossible travel or legacy authentication protocols.
