- Print
- DarkLight
- PDF
Microsoft Entra ID Scout
- Print
- DarkLight
- PDF
Microsoft Entra ID (previously known as Azure Active Directory or AAD) users can create an Microsoft Entra ID Application Scout to test connectivity from a Custom Hive or Cloud Hive endpoint to the AAD endpoint at login.microsoftonline.com. You can measure the time it takes to send two HTTP GET requests to the AAD endpoint and view more detailed information on the HTTP requests and traceroute.
Create an Microsoft Entra ID Scout
In the Scoutbees top bar, click Create Scout to open the Add New Scout window.
From the Infrastructure tab, select Microsoft Entra ID as the Scout Type.
Choose the locations (Hives) from which you want to test your Microsoft Entra ID.
Choose the Scout's Authenticaion method. You can select to authenticate a specific user with OAuth, or register the Scout as an application and give it permission to access your Microsoft Entra ID.
- If you are authenticating a user with OAuth, click Sign in with Microsoft and sign in with a user that has permission to administer your cloud applications.
- If you are authenticating the Scout as an application, follow these steps:
- Create a new App registration for the Scout in your Azure Portal. Visit the Microsoft documentation for instructions.
- Grant the Scout application Organization.Read.All permission through Microsoft Graph API. Visit the Microsoft documentation for instructions.
- In the Scoutbees Add New Scout window, enter your Microsoft Entra ID Tenant (directory) ID, Client (application) ID, and Client Secret.
Enter a Name for the Scout.
Select how often you want the Scout to test your Microsoft Entra ID with the Run Every slider.
Optionally, Add labels to your Scout. Labels are key-value pairs that you can use to organize your Scouts. To learn more about labels, visit Scout Labels.
Click Next: Alert Policy to set up alerts and notifications on the Scout before saving it. For more information, visit Alert Policies.
Test Results
Wait for the first test results after you create your Microsoft Entra ID Scout. We have completed three results which we will examine in more detail in this section.
Click a successful test to see more details.
If you are authenticating via OAuth, the test result shows the user query duration, which is the time it takes to get the current user's information, and the organization query duration:
If you are authenticating via the Scoutbees application, the test result will show the login duration for the application, and the organization query duration: