EntraID
Overview of the EntraID valve category and links to its configuration references.
Entra ID Valves manages MIcrosoft Entra ID via requests to Graph API. All Entra ID Valves requires an EntraID module.
Write valves emit audit events when the EntraID module has audit logging enabled (audit.create, audit.update, audit.delete). The audit subject is taken from the session attribute subject; if absent, "anonymous" is used.
The following operations are covered:
| Valve | Operation | Entity type |
|---|---|---|
| EntraIDCreateUser | create | user |
| EntraIDUpdateUser | update | user |
| EntraIDDeleteUser | delete | user |
| EntraIDResetPassword | update | user |
| EntraIDCreateGroup | create | group |
| UpdateGroup | update | group |
| DeleteGroup | delete | group |
| AddUserToGroups / AddGroupToUsers | update | group |
| RemoveUserFromGroups / RemoveGroupFromUsers | update | group |
Sensitive attribute values (password, secret, token, credential, passphrase) are masked as "*****" in audit change records.
In this section