Allowing Users to Add Enterprise Apps to Entra ID is a Bad Idea

Enterprise apps can come from a variety of sources. Most are Microsoft 1st party apps, and the rest are ISV apps. It’s easy to add an app without really intending to, which is a good reason to force users through the Entra ID app consent workflow when they want to add an app. Unhappily, I failed the test and added an app in a moment of weakness. Here’s what happened.

https://office365itpros.com/2025/10/24/enterprise-apps-my-mistake/