DumbMonit
用 DumbMonit 监控 Microsoft Entra ID
Entra ID application secret and certificate expiry, on-premises directory sync age and administrators without MFA, read through Microsoft Graph.
产品说明为英文，与产品内一致。页面标签使用您的语言。
DumbMonit 监控的内容
Microsoft Entra ID through Microsoft Graph: application secrets and certificates about to expire, a stalled synchronization with the on-premises Active Directory, and administrators with no multifactor authentication. An expired application secret is the quiet outage of an Entra tenant: the backup job, the sign-in of an intranet or the mail relay that used it stops working that day, with nothing to warn you. DumbMonit reads the expiry date of every secret and certificate of every app registration (never their values) and alerts 30 days before.
典型用途. Application secret expiry, directory sync, admin MFA
示例
- Contoso Entra ID
连接方式
您需要准备
- Entra application (client credentials)The application (client) ID and a client secret of an Entra app registration with read-only Graph application permissions.
需要开放的网络端口
443/TCPMicrosoft Graph API (HTTPS, graph.microsoft.com)443/TCPMicrosoft sign-in, token request (HTTPS, login.microsoftonline.com)
设置步骤: Create a read-only Entra application for DumbMonit
In the Microsoft Entra admin center (entra.microsoft.com), open Entra ID → App registrations → New registration, name it DumbMonit, keep a single tenant and register it.
On the Overview page, copy the Application (client) ID and the Directory (tenant) ID.
Open API permissions → Add a permission → Microsoft Graph → Application permissions, add the permissions listed below, then click Grant admin consent.
Open Certificates & secrets → New client secret and copy its Value (not the Secret ID): it is shown once and it expires, so note the date.
In DumbMonit, enter graph.microsoft.com as address, paste the client ID and the secret value, and fill in the Tenant ID option.
注意. Admin consent gives the application tenant-wide read access to the data above. Use a dedicated app registration with only these permissions, and renew its client secret before it expires: DumbMonit watches its own secret like any other.