Skip to content

Fortified IDDocs

EntraID

Overview of the EntraID valve category and links to its configuration references.

Entra ID Valves manages MIcrosoft Entra ID via requests to Graph API. All Entra ID Valves requires an EntraID module.

Write valves publish chain-based change facts with operation identity and pipe/valve origin. Configure the Audit module to collect and persist them. The former EntraID audit.create, audit.update and audit.delete switches have been removed. Use valve-level audit hints for object identity and grouping.

The following operations are covered:

Valve Operation Entity type
EntraIDCreateUser create user
EntraIDUpdateUser update user
EntraIDDeleteUser delete user
EntraIDResetPassword update user
EntraIDCreateGroup create group
UpdateGroup update group
DeleteGroup delete group
AddUserToGroups / AddGroupToUsers update group
RemoveUserFromGroups / RemoveGroupFromUsers update group

Sensitive attribute values (password, secret, token, credential, passphrase) are masked as "*****" in audit change records.

In this section