--- title: How can MSPs enhance security in Entra ID? description: Discover how MSPs can enhance security in Entra ID through best practices in identity protection, access management, and governance. Learn key strategies to protect your organisation. image: https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20shows%20a%20sleek%2c%20modern%20office%20environment%20with%20a%20large%20digital%20display%20mounted%20on%20the%20wall.jpeg --- [Skip to content](https://www.infinieast.com/blog/mspentraid#main-content) [![Screenshot 2024-12-30 at 10.35.53](https://www.infinieast.com/hs-fs/hubfs/Screenshot%202024-12-30%20at%2010.35.53.png?width=2132&height=470&name=Screenshot%202024-12-30%20at%2010.35.53.png "Screenshot 2024-12-30 at 10.35.53")](https://infinieast.com) [![Screenshot 2024-12-30 at 10.35.53](https://www.infinieast.com/hs-fs/hubfs/Screenshot%202024-12-30%20at%2010.35.53.png?width=2132&height=470&name=Screenshot%202024-12-30%20at%2010.35.53.png "Screenshot 2024-12-30 at 10.35.53")](https://infinieast.com) - [About us](https://www.infinieast.com/about) - [Blog](https://www.infinieast.com/blog) - [Contact](https://www.infinieast.com/contact) - Industries - [Charity / Non Profit](https://www.infinieast.com/nonprofit) - [Education](https://www.infinieast.com/education) - [Finance](https://www.infinieast.com/finance) - [Legal](https://www.infinieast.com/legal) - [Small to medium businesses](https://www.infinieast.com/smb) - [Services](https://www.infinieast.com/services) - [Ai Agents & Copilot](https://www.infinieast.com/services#AI) - [Audit](https://www.infinieast.com/services#audit) - [Backup](https://www.infinieast.com/services#backup) - [Consulting](https://www.infinieast.com/consulting) - [Helpdesk](https://www.infinieast.com/services#helpdesk) - [ISO 27001](https://www.infinieast.com/services#iso) - [Project Management](https://www.infinieast.com/services#project) - [Recruitment Support](https://www.infinieast.com/services#recruitment) - [Technical Support](https://www.infinieast.com/services#technical) - [Training](https://www.infinieast.com/services#training) - [XDR](https://www.infinieast.com/services#xdr) - [FAQ](https://www.infinieast.com/services#faq) [Contact Us](https://www.infinieast.com/contact) This is a search field with an autosuggest feature attached. - There are no suggestions because the search field is empty. March 6 2025 # How can MSPs enhance security in Entra ID? [Infini East](https://www.infinieast.com/blog/author/infini-east) ![Blog Details](https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20shows%20a%20sleek%2c%20modern%20office%20environment%20with%20a%20large%20digital%20display%20mounted%20on%20the%20wall.jpeg) # MSPs can enhance security in **Entra ID** (formerly Azure AD) by implementing **best practices** around identity protection, access management, and governance. Here’s a comprehensive approach: ### 1. **Enable Multifactor Authentication (MFA)** - **Use Conditional Access to enforce MFA** for all users, especially admins. - **Enable phishing-resistant MFA methods** like FIDO2 security keys or Microsoft Authenticator’s number matching. ### 2. **Implement Conditional Access Policies** - Block access from risky sign-ins and unknown locations. - Require compliant devices for sensitive applications. - Enforce **Just-In-Time (JIT) access** for admins. ### 3. **Use Entra ID Protection** - Detect and respond to **compromised identities**. - Enable **risk-based sign-in policies** to block high-risk users. - Automate **user risk remediation**. ### 4. **Secure Privileged Access with Entra ID PIM** - Implement **Privileged Identity Management (PIM)** to provide Just-In-Time (JIT) admin access. - Require **approval workflows** for privileged role activation. - **Enforce MFA for admin role activation**. ### 5. **Monitor & Audit with Entra ID Logs** - **Enable audit logs** and integrate with SIEM solutions like Microsoft Sentinel. - Set up **alerts for suspicious activities** (e.g., mass password resets, impossible travel). - Regularly **review access logs** for anomalies. ### 6. **Implement Least Privilege Access (Zero Trust)** - Assign users only the roles they need (**RBAC** model). - Regularly review and **remove unnecessary access**. - Use **Access Reviews** for periodic role validation. ### 7. **Secure Guest & External Access** - Limit **guest user permissions** with external collaboration settings. - Require **MFA for guest users**. - Restrict external sharing of sensitive data. ### 8. **Enable Passwordless Authentication** - Implement **Windows Hello for Business**, FIDO2 security keys, or Passkeys. - Reduce password reliance to **mitigate phishing risks**. ### 9. **Protect Against Legacy Authentication** - Disable **legacy authentication** (e.g., SMTP, POP, IMAP). - Enforce **Modern Authentication** for all apps. ### 10. **Use Defender for Identity & Microsoft Sentinel** - Deploy **Defender for Identity** to detect identity-based threats. - Integrate **Entra ID logs with Microsoft Sentinel** for real-time threat hunting. --- ### **Key Takeaway for MSPs** By implementing **Zero Trust principles**, enforcing **Conditional Access policies**, and leveraging **Microsoft’s security tools**, MSPs can significantly **reduce identity-related risks** in Entra ID. Would you like a step-by-step guide on any of these topics? 🚀 ## Blog comments ## Recent Post [![](https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20modern%20office%20environment%20with%20a%20sleek%20minimalist%20design%20In%20the%20foreground%20a%20diverse%20group%20of%20professionalsthree%20men%20and%20two%20womenare%20engaged%20in%20a%20collaborative%20discussion%20around%20a%20large%20conference%20table%20adorned%20with%20digital%20devic-1.jpeg)](https://www.infinieast.com/blog/meet-your-new-digital-teammate-copilot-agents) Jun 3, 2025 2:22:37 PM [Meet Your New Digital Teammate - Copilot Agents](https://www.infinieast.com/blog/meet-your-new-digital-teammate-copilot-agents) [Infini East](https://www.infinieast.com/blog/author/infini-east) [Read More](https://www.infinieast.com/blog/meet-your-new-digital-teammate-copilot-agents) [![](https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20modern%20office%20environment%20showcasing%20a%20sleek%20workspace%20with%20a%20large%20bright%20window%20allowing%20natural%20light%20to%20flood%20in%20A%20sophisticated%20desktop%20computer%20sits%20on%20a%20minimalist%20desk%20displaying%20a%20vibrant%20digital%20interface%20that%20promotes%20p.jpeg)](https://www.infinieast.com/blog/say-goodbye-to-passwords) Jun 1, 2025 6:18:27 PM [Say goodbye to passwords](https://www.infinieast.com/blog/say-goodbye-to-passwords) [Infini East](https://www.infinieast.com/blog/author/infini-east) [Read More](https://www.infinieast.com/blog/say-goodbye-to-passwords) [![](https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20sleek%20modern%20office%20environment%20with%20a%20vibrant%20digital%20display%20showcasing%20a%20flowchart%20titled%20Your%20ThreeStage%20Guide%20to%20Copilot%20for%20Microsoft%20365%20The%20flowchart%20is%20divided%20into%20three%20distinct%20stages%20Prepare%20for%20Copilot%20Proof%20of%20Value-1.jpeg)](https://www.infinieast.com/blog/copilotplan) May 11, 2025 7:04:37 PM [Microsoft 365 Copilot](https://www.infinieast.com/blog/copilotplan) [Infini East](https://www.infinieast.com/blog/author/infini-east) [Read More](https://www.infinieast.com/blog/copilotplan) [![LinkedIn](https://www.infinieast.com/hs-fs/hubfs/LinkedIn_icon.svg.png?width=42&height=42&name=LinkedIn_icon.svg.png)](https://www.linkedin.com/company/infinieast/) [![tiktok](https://www.infinieast.com/hs-fs/hubfs/tiktok.png?width=42&height=42&name=tiktok.png)](https://www.tiktok.com/@infinieast) [![Logo_of_YouTube](https://www.infinieast.com/hs-fs/hubfs/Logo_of_YouTube_(2015-2017).svg.png?width=100&height=42&name=Logo_of_YouTube_(2015-2017).svg.png)](https://www.youtube.com/@InfiniEast) [![image-png-1](https://www.infinieast.com/hs-fs/hubfs/image-png-1.png?width=40&height=40&name=image-png-1.png)](https://x.com/infinieast) ###### 2024 All rights reserved  ###### Copyright Infini East ltd, Lytchett House, Unit 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA ###### Tel: 020 4572 5373 - 023 9433 0338 ###### Company house number: 16150922 ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Infini East", "url" : "https://www.infinieast.com/blog/author/infini-east" }, "dateModified" : "2025-03-06T15:28:54.891Z", "datePublished" : "2025-03-06T15:24:31.000Z", "headline" : "How can MSPs enhance security in Entra ID?", "image" : [ "https://www.infinieast.com/hubfs/AI-Generated%20Media/Images/The%20image%20shows%20a%20sleek%2c%20modern%20office%20environment%20with%20a%20large%20digital%20display%20mounted%20on%20the%20wall.jpeg" ], "mainEntityOfPage" : { "@id" : "https://www.infinieast.com/blog/mspentraid", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.infinieast.com/hubfs/Logo%20-%20close%20edge%20v1.png" }, "name" : "Infini East" } } ```