# \#entra-id **URL:** https://community.autommate.com/tag/entra-id/56.md [Latest](https://community.autommate.com/latest.md) · [Categories](https://community.autommate.com/categories.md) · [Tags](https://community.autommate.com/tags.md) --- ## [Stopping Entra/Intune duplicate devices from breaking Conditional Access](https://community.autommate.com/t/stopping-entra-intune-duplicate-devices-from-breaking-conditional-access/174)
**Author:** [@Caglayan](https://community.autommate.com/u/Caglayan)\ **Replies:** 0\ **Last updated:** [April 2, 2026, 12:37am UTC](https://community.autommate.com/t/stopping-entra-intune-duplicate-devices-from-breaking-conditional-access/174 "2026-04-02T00:37:04Z")
“Hey, my new laptop says it’s compliant in Company Portal, but Teams keeps telling me I’m on an untrusted device… can you just ‘fix Intune’?” That message kicked off what turned into a surprisingly annoying pattern for … --- ## [Govern Entra risky-user unblocks via ITSM approvals and audit](https://community.autommate.com/t/govern-entra-risky-user-unblocks-via-itsm-approvals-and-audit/160)
**Author:** [@erdem.sakin](https://community.autommate.com/u/erdem.sakin)\ **Replies:** 0\ **Last updated:** [March 30, 2026, 12:28am UTC](https://community.autommate.com/t/govern-entra-risky-user-unblocks-via-itsm-approvals-and-audit/160 "2026-03-30T00:28:00Z")
The problem: “Risky user” tickets bounce between SecOps and Service Desk A common identity-ops pain point: Microsoft Entra ID Protection flags a risky user / risky sign-in. A ticket gets created (often P2/P1 depending … --- ## [Govern Entra PIM activations when access is delayed](https://community.autommate.com/t/govern-entra-pim-activations-when-access-is-delayed/152)
**Author:** [@erdem.sakin](https://community.autommate.com/u/erdem.sakin)\ **Replies:** 0\ **Last updated:** [March 28, 2026, 12:28am UTC](https://community.autommate.com/t/govern-entra-pim-activations-when-access-is-delayed/152 "2026-03-28T00:28:06Z")
Problem: “Approved” emergency access… but Entra PIM activation still isn’t usable A recurring identity-ops pain: the service desk approves an emergency admin request, but the engineer still can’t actually do the work bec… --- ## [Stop “fulfilled” M365 license tickets that don’t grant access](https://community.autommate.com/t/stop-fulfilled-m365-license-tickets-that-don-t-grant-access/139)
**Author:** [@erdem.sakin](https://community.autommate.com/u/erdem.sakin)\ **Replies:** 0\ **Last updated:** [March 24, 2026, 12:28pm UTC](https://community.autommate.com/t/stop-fulfilled-m365-license-tickets-that-don-t-grant-access/139 "2026-03-24T12:28:01Z")
Problem: “License granted” tickets that don’t actually grant access A very common service desk failure mode: A user requests Microsoft 365 / Teams Phone / Project / Visio access via ITSM. The ticket gets approved and m… --- ## [Govern Entra revoke-sessions from ITSM with approvals and audit](https://community.autommate.com/t/govern-entra-revoke-sessions-from-itsm-with-approvals-and-audit/137)
**Author:** [@erdem.sakin](https://community.autommate.com/u/erdem.sakin)\ **Replies:** 0\ **Last updated:** [March 24, 2026, 12:27am UTC](https://community.autommate.com/t/govern-entra-revoke-sessions-from-itsm-with-approvals-and-audit/137 "2026-03-24T00:27:58Z")
Governed “revoke sessions” for compromised users: ticket triggers, Autom Mate executes Cloud identity incidents often stall at the same point: the service desk can identify a compromised user quickly, but the actual cont… --- ## [Govern Entra group access requests with policy checks and rollback](https://community.autommate.com/t/govern-entra-group-access-requests-with-policy-checks-and-rollback/131)
**Author:** [@Caglayan](https://community.autommate.com/u/Caglayan)\ **Replies:** 0\ **Last updated:** [March 22, 2026, 12:28pm UTC](https://community.autommate.com/t/govern-entra-group-access-requests-with-policy-checks-and-rollback/131 "2026-03-22T12:28:02Z")
Problem: “Just add them to the group” is never just that A very common service desk request is: “Please add Alex to the M365/Entra ID group so they can access App X / Team Y / SharePoint Z.” In practice, this turns in… --- ## [Unstick access-request approvals with deterministic escalation](https://community.autommate.com/t/unstick-access-request-approvals-with-deterministic-escalation/111)
**Author:** [@sarp.acikelli](https://community.autommate.com/u/sarp.acikelli)\ **Replies:** 0\ **Last updated:** [March 17, 2026, 12:28pm UTC](https://community.autommate.com/t/unstick-access-request-approvals-with-deterministic-escalation/111 "2026-03-17T12:28:07Z")
When approvals get stuck: deterministic escalation + safe execution for access requests Approval steps are where “AI service desk” flows often die. The agent correctly identifies the request (e.g., “add me to VPN group… --- ## [Device-code vishing containment without tenant-wide lockouts](https://community.autommate.com/t/device-code-vishing-containment-without-tenant-wide-lockouts/107)
**Author:** [@erdem.sakin](https://community.autommate.com/u/erdem.sakin)\ **Replies:** 0\ **Last updated:** [March 13, 2026, 6:00am UTC](https://community.autommate.com/t/device-code-vishing-containment-without-tenant-wide-lockouts/107 "2026-03-13T06:00:38Z")
The problem: device-code vishing is back — but your response can’t be “panic disable everything” Over the last few weeks, multiple reports have highlighted a rise in OAuth device code phishing/vishing targeting Microsoft… --- ## [Passkey migration without AI-driven auth policy drift](https://community.autommate.com/t/passkey-migration-without-ai-driven-auth-policy-drift/99)
**Author:** [@sarp.acikelli](https://community.autommate.com/u/sarp.acikelli)\ **Replies:** 0\ **Last updated:** [March 4, 2026, 6:14am UTC](https://community.autommate.com/t/passkey-migration-without-ai-driven-auth-policy-drift/99 "2026-03-04T06:14:15Z")
The current IT problem: passkey profile auto-migration + “AI helpdesk” risk Microsoft Entra ID is rolling out passkey profiles in March 2026, with automatic tenant migration starting April–May 2026 for orgs that don’t op… --- ## [Governed secret rotation: approvals + deterministic runs + audit logs](https://community.autommate.com/t/governed-secret-rotation-approvals-deterministic-runs-audit-logs/98)
**Author:** [@erdem.sakin](https://community.autommate.com/u/erdem.sakin)\ **Replies:** 0\ **Last updated:** [March 3, 2026, 10:00pm UTC](https://community.autommate.com/t/governed-secret-rotation-approvals-deterministic-runs-audit-logs/98 "2026-03-03T22:00:32Z")
The problem: secret rotation is easy to automate… but hard to govern Entra app registration secrets (and other non-human credentials) still expire and cause outages. The technical fix is straightforward (rotate + update …