# Latest **URL:** https://community.appgovscore.com/latest.md [Latest](https://community.appgovscore.com/latest.md) · [Categories](https://community.appgovscore.com/categories.md) · [Tags](https://community.appgovscore.com/tags.md) --- ## [🌐 Welcome to the Entra ID Application Registration Corner!](https://community.appgovscore.com/t/welcome-to-the-entra-id-application-registration-corner/30)
**Author:** [@ENow\_Natalie](https://community.appgovscore.com/u/ENow_Natalie)\ **Replies:** 0\ **Last updated:** [December 22, 2023, 7:58pm UTC](https://community.appgovscore.com/t/welcome-to-the-entra-id-application-registration-corner/30 "2023-12-22T19:58:38Z")
Hello, Cyber Security and Microsoft 365 enthusiasts! We are thrilled to kick off a dedicated space within our community for all things Entra ID Application Governance. Whether you’re a seasoned professional or just divi… --- ## [Does App Governance Accelerator provide insight into SAML and OAuth apps?](https://community.appgovscore.com/t/does-app-governance-accelerator-provide-insight-into-saml-and-oauth-apps/132)
**Author:** [@ENow\_Laura](https://community.appgovscore.com/u/ENow_Laura)\ **Replies:** 0\ **Last updated:** [May 22, 2026, 1:00am UTC](https://community.appgovscore.com/t/does-app-governance-accelerator-provide-insight-into-saml-and-oauth-apps/132 "2026-05-22T01:00:25Z")
In our latest webinar, Your Application Roadmap, attendee Kyle asked this question. Yes, absolutely. App Governance Accelerator provides visibility into both SAML-based and OAuth applications in Microsoft Entra ID, but … --- ## [App registrations vs Workload Identities](https://community.appgovscore.com/t/app-registrations-vs-workload-identities/131)
**Author:** [@DBennett](https://community.appgovscore.com/u/DBennett)\ **Replies:** 4\ **Last updated:** [March 7, 2026, 3:24pm UTC](https://community.appgovscore.com/t/app-registrations-vs-workload-identities/131 "2026-03-07T15:24:39Z")
We have many requests for App registrations to configure “Single Page Apps” or traditional “Web Apps” for authentication between applications using Entra. Has anyone looked at Workload Identities as an alternative? Alt… --- ## [The Threat Lurking in Your Entra Directory - App Governance Strategies](https://community.appgovscore.com/t/the-threat-lurking-in-your-entra-directory-app-governance-strategies/130)
**Author:** [@ENow\_Laura](https://community.appgovscore.com/u/ENow_Laura)\ **Replies:** 0\ **Last updated:** [November 24, 2025, 9:06pm UTC](https://community.appgovscore.com/t/the-threat-lurking-in-your-entra-directory-app-governance-strategies/130 "2025-11-24T21:06:47Z")
From the Community: The Threat Lurking in Your Entra Directory by Paul Schnackenburg The increasing reliance on cloud services and integrated applications has exposed a significant, often ungoverned, security risk lurki… --- ## [Enterprise app registration](https://community.appgovscore.com/t/enterprise-app-registration/129)
**Author:** [@LukeLo](https://community.appgovscore.com/u/LukeLo)\ **Replies:** 1\ **Last updated:** [October 27, 2025, 3:56pm UTC](https://community.appgovscore.com/t/enterprise-app-registration/129 "2025-10-27T15:56:01Z")
Why is it a problem if an enterprise app is registered with a certificate long validity (20 years for example)? --- ## [Entra apps and On-Prem](https://community.appgovscore.com/t/entra-apps-and-on-prem/127)
**Author:** [@JessPond](https://community.appgovscore.com/u/JessPond)\ **Replies:** 1\ **Last updated:** [October 13, 2025, 4:23pm UTC](https://community.appgovscore.com/t/entra-apps-and-on-prem/127 "2025-10-13T16:23:15Z")
What’s the right way to update Entra apps that connect to on-prem services? Should we be leaning on the vendor’s latest guidance? --- ## [Entra.Chat Interview - The Hidden Risks of Non-Human Identities in Your Tenant](https://community.appgovscore.com/t/entra-chat-interview-the-hidden-risks-of-non-human-identities-in-your-tenant/128)
**Author:** [@ENow\_Laura](https://community.appgovscore.com/u/ENow_Laura)\ **Replies:** 0\ **Last updated:** [October 13, 2025, 3:43pm UTC](https://community.appgovscore.com/t/entra-chat-interview-the-hidden-risks-of-non-human-identities-in-your-tenant/128 "2025-10-13T15:43:04Z")
ENow CEO & Technical Founder, Jay Gundotra, and our good MVP friend, Sander Berkouwer, had the pleasure of sitting down with Merill Fernando on his Entra.Chat podcast. They discussed the hidden risks of non-human identit… --- ## [Vendor Risk Management](https://community.appgovscore.com/t/vendor-risk-management/124)
**Author:** [@RaviK12](https://community.appgovscore.com/u/RaviK12)\ **Replies:** 1\ **Last updated:** [September 10, 2025, 3:54pm UTC](https://community.appgovscore.com/t/vendor-risk-management/124 "2025-09-10T15:54:31Z")
Due to regulations (DORA in our case) we have to setup vendor risk management. Has anyone ever done this for their Entra-integrated SaaS applications? --- ## [Exchange Administrator permissions](https://community.appgovscore.com/t/exchange-administrator-permissions/122)
**Author:** [@SophiaX](https://community.appgovscore.com/u/SophiaX)\ **Replies:** 3\ **Last updated:** [July 26, 2025, 7:55am UTC](https://community.appgovscore.com/t/exchange-administrator-permissions/122 "2025-07-26T07:55:15Z")
We just found an app with Exchange Administrator permissions admin-consented months ago. what’s your process for catching and correcting excessive permissions before they become problematic? --- ## [Microsoft Changes Entra App Consent Default Settings - July 16, 2025](https://community.appgovscore.com/t/microsoft-changes-entra-app-consent-default-settings-july-16-2025/118)
**Author:** [@ENow\_Laura](https://community.appgovscore.com/u/ENow_Laura)\ **Replies:** 2\ **Last updated:** [July 15, 2025, 6:07pm UTC](https://community.appgovscore.com/t/microsoft-changes-entra-app-consent-default-settings-july-16-2025/118 "2025-07-15T18:07:18Z")
Update MC1097272: Microsoft will update default settings to enhance security by requiring admin consent for third-party app access - rollout starting mid-July 2025. While this is great news for security overall, admins n… --- ## [Visibility into OAuth Apps](https://community.appgovscore.com/t/visibility-into-oauth-apps/117)
**Author:** [@Gavin1025](https://community.appgovscore.com/u/Gavin1025)\ **Replies:** 1\ **Last updated:** [June 6, 2025, 12:15pm UTC](https://community.appgovscore.com/t/visibility-into-oauth-apps/117 "2025-06-06T12:15:21Z")
What’s the best way to get visibility into all the OAuth apps connected to M365? We keep finding ones we didn’t approve. --- ## [AppGov Score - Blog](https://community.appgovscore.com/t/appgov-score-blog/77)
**Author:** [@ENow\_Laura](https://community.appgovscore.com/u/ENow_Laura)\ **Replies:** 0\ **Last updated:** [January 30, 2025, 5:16am UTC](https://community.appgovscore.com/t/appgov-score-blog/77 "2025-01-30T05:16:08Z")
Sharing how-to content, DIY methods, and industry trends and news from Microsoft MVPs and subject matter experts. Which topics, scripts, and updates do you want to see on our blog? Let us know below! :newspaper: AppGov… --- ## [AppGov Score - Freemium & Governance Assessment](https://community.appgovscore.com/t/appgov-score-freemium-governance-assessment/79)
**Author:** [@ENow\_Laura](https://community.appgovscore.com/u/ENow_Laura)\ **Replies:** 0\ **Last updated:** [January 30, 2025, 5:31am UTC](https://community.appgovscore.com/t/appgov-score-freemium-governance-assessment/79 "2025-01-30T05:31:31Z")
Not sure where to start? This is the easy button. Request your free AppGov Score to see a high-level overview of your Entra ID application landscape and associated risk profile. :red\_circle: :yellow\_circle: … --- ## [AppGov Score - Preventive Maintenance Webinar Series](https://community.appgovscore.com/t/appgov-score-preventive-maintenance-webinar-series/78)
**Author:** [@ENow\_Laura](https://community.appgovscore.com/u/ENow_Laura)\ **Replies:** 0\ **Last updated:** [January 30, 2025, 5:18am UTC](https://community.appgovscore.com/t/appgov-score-preventive-maintenance-webinar-series/78 "2025-01-30T05:18:50Z")
Join us monthly for webinar content on application governance and security, recommended Entra ID practices, and more! Live and on-demand webinars are available. Have an idea for a webinar topic? Please post it here! … --- ## [Azure AD Graph API retirement deadline](https://community.appgovscore.com/t/azure-ad-graph-api-retirement-deadline/75)
**Author:** [@MichelleN](https://community.appgovscore.com/u/MichelleN)\ **Replies:** 1\ **Last updated:** [January 26, 2025, 8:20pm UTC](https://community.appgovscore.com/t/azure-ad-graph-api-retirement-deadline/75 "2025-01-26T20:20:54Z")
Just found Matthew Levy’s blog on Azure AD Graph API deadline of 1 Feb, 2025. Given MS tendency to shift deadlines, do we think the grace period/time to migrate to MS Graph will be pushed out further? --- ## [Parameters to identify high risk app registrations](https://community.appgovscore.com/t/parameters-to-identify-high-risk-app-registrations/58)
**Author:** [@Louis](https://community.appgovscore.com/u/Louis)\ **Replies:** 1\ **Last updated:** [June 24, 2024, 10:18am UTC](https://community.appgovscore.com/t/parameters-to-identify-high-risk-app-registrations/58 "2024-06-24T10:18:14Z")
I’m currently working on an exercise to identify risky app registrations within my tenant and would appreciate some insights. Here are the metrics I’m considering: The API to which the app is connected. Type of permiss… --- ## [App Registrations: mixed permission types for graph api](https://community.appgovscore.com/t/app-registrations-mixed-permission-types-for-graph-api/57)
**Author:** [@Louis](https://community.appgovscore.com/u/Louis)\ **Replies:** 1\ **Last updated:** [May 26, 2024, 3:05pm UTC](https://community.appgovscore.com/t/app-registrations-mixed-permission-types-for-graph-api/57 "2024-05-26T15:05:45Z")
Hello fellow app registration enthusiast! :blush: I’ve often noticed that some app registrations include a mix of delegated and application permissions for the Graph API. This setup is sometimes configured by IT admins … --- ## [App registration default role permissions](https://community.appgovscore.com/t/app-registration-default-role-permissions/48)
**Author:** [@mattchatt](https://community.appgovscore.com/u/mattchatt)\ **Replies:** 5\ **Last updated:** [March 18, 2024, 5:30pm UTC](https://community.appgovscore.com/t/app-registration-default-role-permissions/48 "2024-03-18T17:30:44Z")
If I assign a user or group of users “Default Access” in users and groups, what access does that grant to the users? If I don’t assign users, and leave the “Assignment required?” property set to “No”, does that mean … --- ## [Deprecation of the ‘Users Can Add Gallery Apps’ setting](https://community.appgovscore.com/t/deprecation-of-the-users-can-add-gallery-apps-setting/54)
**Author:** [@SanderBerkouwer](https://community.appgovscore.com/u/SanderBerkouwer)\ **Replies:** 2\ **Last updated:** [March 18, 2024, 4:07pm UTC](https://community.appgovscore.com/t/deprecation-of-the-users-can-add-gallery-apps-setting/54 "2024-03-18T16:07:18Z")
The setting ‘Users Can Add Gallery Apps’ is removed from the Microsoft Graph and seems deprecated… However, there has been no official communication from Microsoft around this… Not in the message center, not in the What… --- ## [App Registrations without Associated Enterprise Applications are all MSFT related!](https://community.appgovscore.com/t/app-registrations-without-associated-enterprise-applications-are-all-msft-related/52)
**Author:** [@CrushNetworks](https://community.appgovscore.com/u/CrushNetworks)\ **Replies:** 1\ **Last updated:** [March 18, 2024, 4:03pm UTC](https://community.appgovscore.com/t/app-registrations-without-associated-enterprise-applications-are-all-msft-related/52 "2024-03-18T16:03:02Z")
I have P2P Server, Sales Copilot for Microsoft Outlook, and Sales Copilot Power Virtual Agents Bot (Power Virtual Agents) all showing up affecting my score. All are Microsoft apps. P2P Server (used by Azure ESTS Service… --- ## [Non-Admin Consented API Permissions](https://community.appgovscore.com/t/non-admin-consented-api-permissions/53)
**Author:** [@CrushNetworks](https://community.appgovscore.com/u/CrushNetworks)\ **Replies:** 1\ **Last updated:** [March 18, 2024, 3:50pm UTC](https://community.appgovscore.com/t/non-admin-consented-api-permissions/53 "2024-03-18T15:50:23Z")
Under this category, I have 3 items: ENow App Governance Accelerator Data Collector - Professional (which I assume is required to run the portal.appgovscore.com site), GraphAggregatorService (aka Microsoft Graph), and M… --- ## [Veeam backup app](https://community.appgovscore.com/t/veeam-backup-app/50)
**Author:** [@CrushNetworks](https://community.appgovscore.com/u/CrushNetworks)\ **Replies:** 5\ **Last updated:** [February 29, 2024, 9:13am UTC](https://community.appgovscore.com/t/veeam-backup-app/50 "2024-02-29T09:13:14Z")
I get the most flags for the Veeam backup tool. I have the free/community edition. Anyone else seen this? --- ## [🌐 Welcome to the Entra ID SaaS Applications Corner!](https://community.appgovscore.com/t/welcome-to-the-entra-id-saas-applications-corner/43)
**Author:** [@ENow\_Natalie](https://community.appgovscore.com/u/ENow_Natalie)\ **Replies:** 0\ **Last updated:** [January 5, 2024, 3:25pm UTC](https://community.appgovscore.com/t/welcome-to-the-entra-id-saas-applications-corner/43 "2024-01-05T15:25:54Z")
Hello, Cyber Security and Microsoft 365 enthusiasts! We are thrilled to kick off a dedicated space within our community for all things related to dealing with SaaS Applications in Entra ID. Whether you’re a seasoned pro… --- ## [🌐 Welcome to the Entra ID Tenant Settings Corner!](https://community.appgovscore.com/t/welcome-to-the-entra-id-tenant-settings-corner/34)
**Author:** [@ENow\_Natalie](https://community.appgovscore.com/u/ENow_Natalie)\ **Replies:** 0\ **Last updated:** [December 23, 2023, 1:44pm UTC](https://community.appgovscore.com/t/welcome-to-the-entra-id-tenant-settings-corner/34 "2023-12-23T13:44:01Z")
Hello, Cyber Security and Microsoft 365 enthusiasts! We are thrilled to kick off a dedicated space within our community for all things Entra ID Application Governance. Whether you’re a seasoned professional or just divi… --- ## [🌐 Welcome to the Entra ID Enterprise Applications Corner!](https://community.appgovscore.com/t/welcome-to-the-entra-id-enterprise-applications-corner/35)
**Author:** [@ENow\_Natalie](https://community.appgovscore.com/u/ENow_Natalie)\ **Replies:** 0\ **Last updated:** [December 23, 2023, 1:45pm UTC](https://community.appgovscore.com/t/welcome-to-the-entra-id-enterprise-applications-corner/35 "2023-12-23T13:45:24Z")
Hello, Cyber Security and Microsoft 365 enthusiasts! We are thrilled to kick off a dedicated space within our community for all things Entra ID Application Governance. Whether you’re a seasoned professional or just divi… --- ## [What is the difference between Application Registration and Enterprise Application?](https://community.appgovscore.com/t/what-is-the-difference-between-application-registration-and-enterprise-application/26)
**Author:** [@ENow\_Jay](https://community.appgovscore.com/u/ENow_Jay)\ **Replies:** 0\ **Last updated:** [November 25, 2023, 4:27pm UTC](https://community.appgovscore.com/t/what-is-the-difference-between-application-registration-and-enterprise-application/26 "2023-11-25T16:27:13Z")
Many people struggle with understanding the difference between an Application Registration and Enterprise Application. Check out this helpful article by Sander Berkouwer: