MFA & Conditional Access
Per-user MFA coverage, strongest-method ranking, and Conditional Access policy coverage per app — with drill-down to Identity Protection if you have Entra P2.
SaaS Posture · Microsoft 365
SaaS Posture for Microsoft 365
Connect your M365 tenant with an App registered in your own Entra ID — no third-party shared app in your directory. Continuous visibility into identities, OAuth apps, Exchange and SharePoint/OneDrive.
Capabilities
OAuth Apps with consent
Every app with Application/DelegatedPermissionGrant on your tenant, publisher resolved, scopes ranked by risk, and who granted consent — includes 1-click revoke.
Exchange — inbox rules & mailbox audit
Suspicious auto-forwarding rules and mailbox audit status, to catch silent post-compromise in mailboxes.
SharePoint & OneDrive external shares
Everything shared "with anyone with the link" or with external domains, in one panel — something the M365 Admin Center doesn't natively consolidate.