DumbMonit
IntégrationsSécurité et identité
Surveiller Microsoft Entra ID avec DumbMonit
Entra ID application secret and certificate expiry, on-premises directory sync age and administrators without MFA, read through Microsoft Graph.
DocumentationSite officiel : Microsoft Entra ID
Les descriptions des produits sont en anglais, comme dans le produit. Les libellés de la page suivent votre langue.
Ce que DumbMonit surveille
Microsoft Entra ID through Microsoft Graph: application secrets and certificates about to expire, a stalled synchronization with the on-premises Active Directory, and administrators with no multifactor authentication. An expired application secret is the quiet outage of an Entra tenant: the backup job, the sign-in of an intranet or the mail relay that used it stops working that day, with nothing to warn you. DumbMonit reads the expiry date of every secret and certificate of every app registration (never their values) and alerts 30 days before.
Usage typique. Application secret expiry, directory sync, admin MFA
Exemples
- Contoso Entra ID
Comment il se connecte
Ce qu'il faut
- Entra application (client credentials)The application (client) ID and a client secret of an Entra app registration with read-only Graph application permissions.
Ports réseau à ouvrir
443/TCPMicrosoft Graph API (HTTPS, graph.microsoft.com)443/TCPMicrosoft sign-in, token request (HTTPS, login.microsoftonline.com)
Étapes de mise en place: Create a read-only Entra application for DumbMonit
In the Microsoft Entra admin center (entra.microsoft.com), open Entra ID → App registrations → New registration, name it DumbMonit, keep a single tenant and register it.
On the Overview page, copy the Application (client) ID and the Directory (tenant) ID.
Open API permissions → Add a permission → Microsoft Graph → Application permissions, add the permissions listed below, then click Grant admin consent.
Open Certificates & secrets → New client secret and copy its Value (not the Secret ID): it is shown once and it expires, so note the date.
In DumbMonit, enter graph.microsoft.com as address, paste the client ID and the secret value, and fill in the Tenant ID option.
À savoir. Admin consent gives the application tenant-wide read access to the data above. Use a dedicated app registration with only these permissions, and renew its client secret before it expires: DumbMonit watches its own secret like any other.