Connect Microsoft Entra ID to Polara
An app registration in your own tenant with read-only Microsoft Graph permissions. Pulls users, multi-factor authentication (MFA) registration, conditional access, privileged roles and Intune device encryption.
What you connect
Credential. An app registration in your tenant, read permissions only.
- Directory (tenant) ID
- On the app's Overview page.
- Application (client) ID
- On the same Overview page.
- Client secret
- The secret's Value, shown once when you create it. Not the Secret ID.
Where to find it
The connect dialog in your dashboard shows these steps next to the fields.
- In the Microsoft Entra admin center, open App registrations and create a new registration.
- Under API permissions, add Directory.Read.All, AuditLog.Read.All, Policy.Read.All and DeviceManagementManagedDevices.Read.All as application permissions, then grant admin consent.
- Under Certificates and secrets, create a client secret and paste it here.
Read-only. Every permission is a Read permission. Polara cannot change users, policies or devices. Entra keeps 30 days of sign-ins, so Polara's history for Entra starts the day you connect.
What Polara collects
5 evidence itemsEach item lists the System and Organization Controls 2 (SOC 2) criteria it carries and the control it supports.
| Evidence | What it shows | Controls it satisfies |
|---|---|---|
| Users and last sign-in | Directory users with their enabled status, user type and last sign-in. | Controls it satisfies: CC6.2, CC6.3, CC1.5Entra ID user list for access reviews |
| Multi-factor registration | How many users have registered a multi-factor authentication method. | Controls it satisfies: CC6.1, CC6.6Multi-factor authentication (MFA) registration in Entra ID |
| Conditional access policies | Enabled conditional access policies that require multi-factor authentication. | Controls it satisfies: CC6.1, CC6.6Entra ID policies that require multi-factor authentication |
| Privileged role assignments | Directory role assignments, including who holds Global Administrator. | Controls it satisfies: CC6.3Named privileged admins |
| Intune managed devices | Devices managed in Intune, with their encryption and compliance state. | Controls it satisfies: CC6.1, CC6.7Full disk encryption on laptopsCC6.8, CC6.1Device management on company laptops |
Connect Microsoft Entra ID from your dashboard.
Create an account, open Integrations, and paste the app credentials.
Take the free assessmentAlready a customer? Open Integrations