--- title: "#entra-id articles | Hashnode" description: "Explore 98 articles tagged #entra-id on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/entra-id" --- Tag # #entra-id 98 posts · 5 followers [Timo Herwix](https://hashnode.com/@timoherwix) · [5d ago](https://hashnode.com/posts/beyond-sso-extracting-saml-group-claims-in-oracle-apex-with-pl-sql/6aedd8ee0fa8ab38bf0804ea) ### [Beyond SSO: Extracting SAML Group Claims in Oracle APEX with PL/SQL](https://tm-apex.hashnode.dev/beyond-sso-extracting-saml-group-claims-in-oracle-apex-with-pl-sql?utm_source=hashnode&utm_medium=feed) Part 3: Extending SAML Sign-In with a Post-Authentication Procedure 10 min read · [tm-apex.hashnode.dev](https://tm-apex.hashnode.dev/beyond-sso-extracting-saml-group-claims-in-oracle-apex-with-pl-sql?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/beyond-sso-extracting-saml-group-claims-in-oracle-apex-with-pl-sql/6aedd8ee0fa8ab38bf0804ea) [AdminPackStudio](https://hashnode.com/@adminpackstudio) · [Oct 15](https://hashnode.com/posts/aadsts50105-user-not-assigned-to-a-role-for-the-application-a-read-first-enterprise-app-assignment-triage/6ad137647f3bd0754e187cbe) ### [AADSTS50105 User Not Assigned to a Role for the Application: A Read-First Enterprise App Assignment Triage](https://adminpackstudio.hashnode.dev/aadsts50105-user-not-assigned-to-a-role-for-the-application-a-read-first-enterprise-app-assignment-triage?utm_source=hashnode&utm_medium=feed) AADSTS50105 means Assignment required is on and the user isn't assigned. Read the app, group membership, and nested groups before you turn it off. 18 min read · [adminpackstudio.hashnode.dev](https://adminpackstudio.hashnode.dev/aadsts50105-user-not-assigned-to-a-role-for-the-application-a-read-first-enterprise-app-assignment-triage?utm_source=hashnode&utm_medium=feed) [AdminPackStudio](https://hashnode.com/@adminpackstudio) · [Oct 14](https://hashnode.com/posts/aadsts53003-blocked-by-conditional-access-a-read-first-sign-in-log-triage/6acf2062a5fd817d61d9b282) ### [AADSTS53003 Blocked by Conditional Access: A Read-First Sign-In Log Triage](https://adminpackstudio.hashnode.dev/aadsts53003-blocked-by-conditional-access-a-read-first-sign-in-log-triage?utm_source=hashnode&utm_medium=feed) What AADSTS53003 means, how to find the sign-in event and blocking policy, and five usual causes to check before adding an exclusion. 10 min read · [adminpackstudio.hashnode.dev](https://adminpackstudio.hashnode.dev/aadsts53003-blocked-by-conditional-access-a-read-first-sign-in-log-triage?utm_source=hashnode&utm_medium=feed) [AdminPackStudio](https://hashnode.com/@adminpackstudio) · [Oct 14](https://hashnode.com/posts/entra-id-break-glass-accounts-best-practices-after-mandatory-mfa/6acee74d2293fed71560e855) ### [Entra ID Break-Glass Accounts: Best Practices After Mandatory MFA](https://adminpackstudio.hashnode.dev/entra-id-break-glass-accounts-best-practices-after-mandatory-mfa?utm_source=hashnode&utm_medium=feed) Set up and test Entra ID break-glass accounts under mandatory MFA: FIDO2 passkeys, Conditional Access exclusions, PIM, alerts, and an audit script. 12 min read · [adminpackstudio.hashnode.dev](https://adminpackstudio.hashnode.dev/entra-id-break-glass-accounts-best-practices-after-mandatory-mfa?utm_source=hashnode&utm_medium=feed) [kbentis](https://hashnode.com/@kbentis) · [Oct 4](https://hashnode.com/posts/how-much-of-your-intune-tenant-is-deploying-to-nobody/6ac2a2f0d302b3f778924acc) ### [How much of your Intune tenant is deploying to nobody?](https://kbentis.cloud/how-much-of-your-intune-tenant-is-deploying-to-nobody?utm_source=hashnode&utm_medium=feed) Meet Intune Housekeeper, a read-only cleanup report for your tenant. 7 min read · [kbentis.cloud](https://kbentis.cloud/how-much-of-your-intune-tenant-is-deploying-to-nobody?utm_source=hashnode&utm_medium=feed) [Mihai\_LeanZero](https://hashnode.com/@mihaileanzero) · [Oct 2](https://hashnode.com/posts/microsoft-graph-to-jira-assets-user-ingestion/6ac03288489c39032a8025b8) ### [Microsoft Graph to Jira Assets User Ingestion](https://leanzero.hashnode.dev/microsoft-graph-to-jira-assets-user-ingestion?utm_source=hashnode&utm_medium=feed) Ingest users from Microsoft Graph (Entra ID) into Jira Service Management Assets, including the parts the public Assets API does not document. 19 min read · [leanzero.hashnode.dev](https://leanzero.hashnode.dev/microsoft-graph-to-jira-assets-user-ingestion?utm_source=hashnode&utm_medium=feed) [Hardik Arora](https://hashnode.com/@Hardik999) · [Sep 13](https://hashnode.com/posts/my-breaking-and-learningjourney-with-azure-devops/6aa66310a823e12c453ac4d4) ### [My Breaking and LearningJourney with Azure Devops](https://hardik0811arora.hashnode.dev/my-breaking-and-learningjourney-with-azure-devops?utm_source=hashnode&utm_medium=feed) Moving forward with practical learning journey through .NET builds, Docker, Azure DevOps, container security, and a few pipeline failures along the way. 7 min read · [hardik0811arora.hashnode.dev](https://hardik0811arora.hashnode.dev/my-breaking-and-learningjourney-with-azure-devops?utm_source=hashnode&utm_medium=feed) [Daniel Weber](https://hashnode.com/@axeti) · [Aug 19](https://hashnode.com/posts/why-microsoft-365-group-based-licensing-fails-quietly/6a858f08d01fae4dec0d43cc) ### [Why Microsoft 365 Group-Based Licensing Fails Quietly](https://engineering-field-notes.hashnode.dev/why-microsoft-365-group-based-licensing-fails-quietly?utm_source=hashnode&utm_medium=feed) The assignment succeeded for the group. That does not mean every user received the license. 5 min read · [engineering-field-notes.hashnode.dev](https://engineering-field-notes.hashnode.dev/why-microsoft-365-group-based-licensing-fails-quietly?utm_source=hashnode&utm_medium=feed) [Kajal Dhanjal](https://hashnode.com/@kajalbuilds) · [Aug 18](https://hashnode.com/posts/anatomy-of-an-identity-compromise/6a8435894bf6c7f3da41b104) ### [Anatomy of an identity compromise](https://kajalbuilds.hashnode.dev/anatomy-of-an-identity-compromise?utm_source=hashnode&utm_medium=feed) A login-only intrusion, step by step, and where the detection actually lives 12 min read · [kajalbuilds.hashnode.dev](https://kajalbuilds.hashnode.dev/anatomy-of-an-identity-compromise?utm_source=hashnode&utm_medium=feed) [Sachin Nandanwar](https://hashnode.com/@SachinNandanwar) · [Aug 5](https://hashnode.com/posts/secure-ai-functions-in-microsoft-agent-framework-with-microsoft-entra-oauth-role-based-access-control/6a73ca5267e604c5971262dc) ### [Secure AI Functions in Microsoft Agent Framework with Microsoft Entra OAuth Role-Based Access Control](https://www.azureguru.net/secure-ai-functions-in-microsoft-agent-framework-with-microsoft-entra-oauth-role-based-access-control?utm_source=hashnode&utm_medium=feed) Secure AI function invocation in Microsoft Agent Framework by dynamically exposing AIFunctions based on Microsoft Entra ID access token claims. 14 min read · [azureguru.net](https://www.azureguru.net/secure-ai-functions-in-microsoft-agent-framework-with-microsoft-entra-oauth-role-based-access-control?utm_source=hashnode&utm_medium=feed)