Microsoft Entra Workload ID documentation

Microsoft Entra Workload ID helps you manage and secure identities for digital workloads, such as apps and services.

About workload identities

Overview

• What are workload identities?
• Frequently asked questions about license plans

Check app health status and mitigate risk

How-To Guide

• Remove unused applications
• Remove unused credentials from apps
• Renew expiring application credentials

Connect workloads without managing secrets

Overview

• What is workload identity federation?

video

• Learn why you would use workload identity federation

How-To Guide

• Configure an app to trust an external identity provider
• Configure a managed identity to trust an external identity provider

Enforce best practice for how apps use auth methods

Overview

• Application authentication methods API

Secure risky workload identities

Overview

• Secure workload identities

Configuring applications to trust managed identities

How-To Guide

• Configure an application to trust a managed identity (preview)

Apply Conditional Access policies to service principals

How-To Guide

• Conditional Access for workload identities

Enable real-time enforcement of Conditional Access location and risk policies

How-To Guide

• Continuous access evaluation for workload identities

Contain threats and reduce risk to workload identities

How-To Guide

• Microsoft Entra ID Protection

Review service principals and applications privileged directory roles

How-To Guide

• Access reviews for service principals