Skip to content

Microsoft 365

What is Microsoft Entra ID?

By Suresh Girinathuni

Quick answer

Microsoft Entra ID (renamed from Azure Active Directory) is Microsoft’s cloud identity and access management service. Organizations use it to authenticate users and applications, manage identities and groups, enforce Conditional Access policies and multifactor authentication, and control access to Microsoft 365, Azure, and thousands of connected SaaS apps. Every Microsoft 365 sign-in flows through it.

Key takeaways

  • Formerly Azure AD; one identity for Microsoft 365, Azure, and SaaS.
  • Conditional Access + MFA are the core enforcement levers.
  • Admin roles and guest lifecycle need explicit ownership.

Detailed Explanation

Microsoft Entra ID (renamed from Azure Active Directory) is Microsoft’s cloud identity and access management service. Organizations use it to authenticate users and applications, manage identities and groups, enforce Conditional Access policies and multifactor authentication, and control access to Microsoft 365, Azure, and thousands of connected SaaS apps. Every Microsoft 365 sign-in flows through it.

How it works

Users authenticate once against the tenant directory and receive tokens for each app; Conditional Access evaluates every sign-in against signals (device, location, risk) and grants, challenges, or blocks. Admin roles and role assignments in Entra ID decide who can change tenant configuration.

Limitations and considerations

Identity misconfiguration is the top tenant risk: over-privileged Global Administrators, missing MFA, and unreviewed Conditional Access exclusions. Directory sync and guest-user lifecycle need explicit ownership.

This Q&A page is the short-answer layer for “What is Microsoft Entra ID?” Use the related guides below when you need implementation steps, architecture trade-offs, or troubleshooting detail.

For broader context, visit the Microsoft 365 Hub. It connects this topic to surrounding Microsoft 365, Power Platform, SharePoint, Copilot Studio, Dataverse, migration, and Dynamics 365 guidance.

When to use it

Start every tenant security review here — admin roles, Conditional Access coverage, MFA status, and guest access — before tuning individual workload settings.

Practical example

A company blocks legacy authentication tenant-wide via one Conditional Access policy in Entra ID, cutting the most abused sign-in path for all Microsoft 365 apps at once.

Related Questions

What is Microsoft 365?Microsoft 365 is Microsoft’s cloud productivity platform — Teams, SharePoint, OneDrive, Exchange Online, and Microsoft 365 Apps — combined with identity (Entra ID), security, compliance, and administration.What is the difference between Office 365 and Microsoft 365?Office 365 names the productivity-services subscription line (Exchange, SharePoint, Teams, Office apps); Microsoft 365 is the broader platform bundle that adds Windows, Entra ID, Intune device management, and security depending on the plan.What is Microsoft Graph?Microsoft Graph is the unified API for Microsoft 365: one endpoint model to read and manage users, groups, Teams, SharePoint, mail, calendars, and more — governed by explicit permissions and consent.What is Microsoft Teams?Microsoft Teams is Microsoft 365’s collaboration hub — chat, meetings, calling, and teamwork — built on SharePoint (files), Exchange (calendars), and Entra ID (identity) underneath.

Related nextM365 Guides

Microsoft 365Microsoft 365 Admin Roles Explained: Complete Guide (2026)A practical guide to Microsoft 365 admin roles, Microsoft Entra roles, RBAC, least privilege, Global Administrator risks, workload admin roles, support roles, AI administration, PIM, and role assignment scenarios.Microsoft 365Microsoft 365 Admin Center: Complete Administrator GuideLearn how to use the Microsoft 365 Admin Center to manage users, licenses, roles, Teams, SharePoint, Exchange, security, service health, reports, billing, domains, and common admin tasks.

Sources