Domain.Read.All
User.Read.All (users per domain)
— application permissions, granted to the app registration with admin consent.
Licence: None.
Endpoints:
GET /v1.0/domains · GET /v1.0/domains/{id}/federationConfiguration
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
Domain Federation & Trust Audit
A federated domain hands authentication for its users to another identity provider. Attackers who gain Global Administrator add a federation to keep access ("Golden SAML"), and an expired signing certificate stops every sign-in for the domain. This report lists every domain, its trust, certificate expiry and whether Entra accepts the IdP's MFA claim.
Loading...