How to find "forbidden" messages for applications in Entra ID?
Hi, I thought to ask from here, but which different log methods Entra ID offers for troubleshooting login issues? In my case, I have had an application running on the VMs in Entra and it has been working fine. They are using the client secrets from the application registration to accessing Entra. Last Monday was the latest day when that application was working, and since then the app logs on the VMs are full of forbidden messages when it is trying to access to login.microsoftonline.com. The challenge I have is, I cannot find that forbidden message from anywhere on Entra logs? I can only see those "success" before Monday when the application has been working. But I'm a bit lost from where I should try to find those forbidden information? The client secrets are fine from the portal point of view. This have something to do with token, as part of the forbidden error it says: MSAL: Token Acquisition 1004 failed. But the question is, what log in Entra I should be using to find this issue? No, nothing has change 😄 As usually 😄When employee leave company
Hi, I went through our application registrations in Azure and noticed applications where owners were persons who are already left from company. How do you handle these cases? How do you query the whole Azure to secure that there are no orphan services/applications etc..? Application registrations are of course one story, but obviously not the only one.
[Entitlement Management] Please provide the possibility to assign roles on Access Package level
It would be very beneficial if it would be possible to assign fine grained role permission based on access package. Currently it is only available on catalog level. The approach to define permission based on catalog does not provide a secure but also flexible way to assign permission to the business users.
