the entra id encyclopedia

Microsoft Entra ID, explained and interlinked — authored concept articles, grounded in the official corpus, threaded with the Azure AD heritage story.

Not a search box and a results list. A body of curated, browsable articles with a sense of place — each one part authored editorial, part cited evidence. Wander the nine categories, or jump to a core concept.

Start here → The Azure AD heritage lens Search the corpus (utility)

browse by category

01 Fundamentals What Entra is, the tenant model, the Azure AD->Entra rename and family history, licensing tiers, admin surfaces. Start here. authoring soon 02 Identity Users, groups, the directory, authentication (MFA, passwordless, passkeys), SSO, Domain Services, hybrid identity. authoring soon 03 Access & Conditional Access Conditional Access policies, the enforcement model, named locations, session controls, authentication strength. 1 article 04 Identity Protection & Security Risk-based policies, risky users and sign-ins, risk detections, Identity Protection, security-operator actions. authoring soon 05 Governance Entitlement management, access packages, access reviews, lifecycle workflows, PIM. authoring soon 06 Applications & Workload Identity App registrations, enterprise apps, service principals, OAuth, consent, managed identities, workload identity federation. authoring soon 07 Agent ID Governed identities for AI agents, Conditional Access for agents, governance and protection for agents. The Entra frontier. authoring soon 08 External & Decentralized Identity External ID (B2B/B2C successor), Verified ID (decentralized credentials), and the legacy Azure AD B2C lineage. 1 article 09 Network Access Global Secure Access: Internet Access, Private Access (ZTNA/SWG). authoring soon

core concepts

External & Decentralized Identity heritage draft

Azure AD B2C and External ID

The Microsoft customer-identity (CIAM) story - from the standalone Azure AD B2C product to its modern successor, Microsoft Entra External ID. A textbook Entra supersession with a real migration path.

Read →

Access & Conditional Access draft

Conditional Access

Microsoft Entra's policy engine for access decisions - it evaluates sign-in signals (who, what, where, how risky) and enforces controls like MFA or device compliance before granting access to protected resources.

Read →

heritage / formerly known as

Entrapedia threads the Azure AD → Microsoft Entra ID lineage through every article — renamed features, retired products, and deprecated-with-modern-equivalent. Legacy content carries a distinct archival treatment so the evolution reads at a glance.

archive Azure AD B2C and External ID

how to read entrapedia

● authored + official

Editorial voice over Microsoft-published evidence. Cyan glow = authoritative/current.

■ legacy / heritage

Azure AD lineage — renamed, deprecated, formerly-known-as. Amber archival treatment.

□ community

Attributed third-party evidence (e.g. licensing matrices), flagged verify against Microsoft. Never outranks official.