Skip to content

Fortified IDDocs

EntraID

Entra ID Valves manages MIcrosoft Entra ID via requests to Graph API. All Entra ID Valves requires an EntraID module.

Audit

Section titled “Audit”

Write valves emit audit events when the EntraID module has audit logging enabled (audit.create, audit.update, audit.delete). The audit subject is taken from the session attribute subject; if absent, "anonymous" is used.

The following operations are covered:

Valve Operation Entity type
EntraIDCreateUser create user
EntraIDUpdateUser update user
EntraIDDeleteUser delete user
EntraIDResetPassword update user
EntraIDCreateGroup create group
UpdateGroup update group
DeleteGroup delete group
AddUserToGroups / AddGroupToUsers update group
RemoveUserFromGroups / RemoveGroupFromUsers update group

Sensitive attribute values (password, secret, token, credential, passphrase) are masked as "*****" in audit change records.

In this section