Supported Features
The Microsoft Entra ID SaaS connector supports the following features:
Refer to the following pages for details on each feature:
- Account, Group, and Role Management
- Security, Authentication, and Compliance
- Privileged Access and Azure Cloud Governance
- Microsoft 365 and Collaboration
Account and Identity Management
| Feature | Description |
|---|---|
| Account Management for User, User in Federated Domain, Guest User (B2B), and External Member (B2B) | Aggregate, create, update, enable, disable, and delete accounts for standard users, federated domain users, B2B guest users and external members. |
| Password Management | Change the password for a user of the source when Password Management is enabled for your organization. |
| Account Management for Local User (B2C) | Aggregate and manage lifecycle operations for local B2C user accounts. |
| Revoke Session After Disabling User Account | Sign the user out of their existing sessions when their account is disabled, so access ends immediately instead of when their existing sessions expire. |
| Service Principal Account Management | Aggregate and provision enterprise application service principals as accounts. |
| Azure Mail Contact Management | Aggregate Azure mail contacts as read-only accounts in SailPoint. |
| Last Login for Accounts | Collect last sign-in timestamps for accounts during aggregation. |
| Managed Identity Management | Manage Azure managed identities, including user-assigned and system-assigned identities. |
| Service Plan Management (Managing Licenses) | Assign and remove Microsoft 365 and other service plan licenses for user accounts. |
Group, Role, and Entitlement Management
| Feature | Description |
|---|---|
| Account - Group Management | Aggregate Microsoft Entra groups and manage group membership for accounts. |
| Group Hierarchy Information | Aggregate nested group relationships and hierarchy data. |
| Microsoft Entra Role Management | Aggregate built-in and custom Microsoft Entra directory roles and manage role assignments. |
| Administrative Units | Aggregate and manage administrative units and scoped role assignments. |
| Access Package Management | Aggregate and manage Entitlement Management access packages and assignments. |
| Custom Security Attributes | Manage custom security attributes defined in Microsoft Entra ID. |
| Custom (Extension) Attributes | Manage extended attributes registered on the Azure client application. |
| Privilege Classification | Classify privileged access for Microsoft Entra entitlements in SailPoint. |
Privileged Access and Azure Cloud Governance
| Feature | Description |
|---|---|
| Azure Privileged Identity Management (PIM) | Manage Privileged Identity Management for Microsoft Entra roles (Azure PIM) and groups, including eligible and active assignments (Azure PIM Groups). |
| Azure Cloud Object Management | Aggregate Azure management groups, subscriptions, resource groups, and role assignments. Important |
| Azure Government Endpoint Configuration | Configure Azure Resource Manager endpoints for cloud object aggregation and governance. |
Security, Authentication, and Compliance
| Feature | Description |
|---|---|
| Multi-Factor Authentication (MFA) Management | Manage MFA attributes such as phone numbers, email addresses, and Microsoft Authenticator settings. |
| OAuth 2.0 Authentication | Authenticate using OAuth 2.0 grant types supported by the connector (client credentials and refresh token). |
| Continuous Access Evaluation | Support continuous access evaluation for real-time access revocation scenarios. |
| Risky User Alert Feature | Surface risky user detections from Microsoft Entra ID Identity Protection. |
| Risky Service Principal Alert Feature | Surface risky service principal detections for workload identities in your tenant. |
| Activity Insights | Collect account activity data from Microsoft Entra ID for Activity Insights. |
Microsoft 365 and Collaboration
| Feature | Description |
|---|---|
| Exchange Online Management | Manage Exchange Online mailbox settings and attributes for Microsoft Entra user accounts. |
| Microsoft Teams | Aggregate and manage Microsoft Teams as entitlements. |
| Channel Management | Aggregate and manage Microsoft Teams channels as entitlements. |
Aggregation Performance
The Microsoft Entra ID SaaS connector includes built-in parallel aggregation. It uses paging and processes retrieved accounts in parallel to improve account aggregation performance. For more information, refer to Aggregation and Filter Settings.
Non-Human Identity Discovery
Note
Datasets are also available in SailPoint Agentic Fabric. Contact your Customer Success team and refer to SailPoint Agentic Fabric for more information.
| Feature | Description |
|---|---|
| Machine Identity Governance |
|
| Azure AI Foundry Agents Management |
|
| Microsoft Copilot Studio Agents Management |
|
| Microsoft Agent 365 Catalog Management |
|
| SailPoint Non-Human Identity (NHI) Discovery | Discover Microsoft non-human identities and AI agents, including app registrations, SAML certificates, hybrid and cloud Entra users, Copilot chats, and secrets stored in Azure Key Vault. For more information, refer to Additional Permissions for SailPoint NHI Discovery. |
| Exposed Secret Scanning | Continuously scan Microsoft Teams, SharePoint, and OneDrive for exposed secrets. |
| Service Principal Posture Analysis | Detect posture issues and anomalous behavior in service principals. |
Refer to Dataset Management for more information.
Refer to Discovering Potential Non-Human Accounts for more information.
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.