Review and update Entra ID core settings
Microsoft Entra ID Setup & Core Configuration Service
A secure identity platform is the foundation of any modern IT environment. This service delivers a complete setup, review, and optimisation of your Microsoft Entra ID tenant to strengthen security, streamline user access, and ensure your organisation follows Microsoft’s best‑practice identity standards.
Designed for organisations establishing Entra ID for the first time or improving an existing tenant, this service ensures your identity configuration is secure, compliant, and ready to support cloud‑first operations.
Service Overview
Our specialists evaluate and configure all core Microsoft Entra ID components essential for secure authentication, modern access control, and effective identity governance. This includes user and group management, Conditional Access, authentication methods, enterprise applications, and security‑focused reviews to enhance identity protection.
What’s Included
Core Tenant Configuration
- Setup and configuration of Company Branding to deliver a professional and trusted sign-in experience
- Full review of User Accounts to identify unnecessary, inactive, or misconfigured accounts
- Disable interactive authentication on accounts that should not allow sign-in
- Review and update of User Settings, including “Users can register applications”
Group & Device Settings
- Review of Group Settings, including Microsoft 365 group expiration configuration
- Audit and configuration of Device Settings, including “Users may join devices to Azure AD”
- Review of Enterprise State Roaming settings to ensure correct sync and security posture
Enterprise Applications & Permissions
- Comprehensive review of Enterprise Applications to validate usage, permissions, and risk
- Check and configure Enterprise Application Consent & Permissions
- Setup of an admin approval workflow for application consent requests
- Review of App Registrations for unused apps, insecure configurations, or excessive permissions
Conditional Access Policies
Review and configuration of Conditional Access policies including:
- Require phishing‑resistant MFA for administrators
- Secure MFA and SSPR registration processes
- Block legacy authentication policies
- Baseline zero‑trust aligned rules to protect identities, data, and privileged roles
Authentication Methods & Identity Protection
- Migration to the converged SSPR and Authentication Methods policy
Setup and configuration of:- Temporary Access Pass (TAP)
- Microsoft Authenticator
- Registration Campaign prompts for MFA adoption
- Review of Password Protection (banned password enforcement)
- Validation of User Registration Details to confirm users are enabled for MFA & SSPR
- Troubleshooting of any blocked or misconfigured accounts
Password & Security Hygiene
- Review of user password health across the tenant
- Enforcement of modern password standards and secure authentication patterns
- Validation of SSPR configuration and recovery options for all relevant accounts
Who This Service Is For
This service is ideal for organisations that want:
- A secure and fully optimised Microsoft Entra ID identity platform
- Strong authentication and Conditional Access based on best practices
- Reduced security risk through improved identity hygiene
- Automated, compliant, and modern access management
- A solid foundation for Microsoft 365, Intune, and Azure services
Deliverables
- Fully configured and security‑aligned Entra ID tenant
- Modern authentication setup with MFA, TAP, passwordless options
- Conditional Access policies aligned with Zero Trust
- Application consent and review workflows
- Cleanup and optimisation of user accounts, groups, devices, and app registrations
- Documentation outlining all configurations applied