---
title: "Microsoft Entra ID Test"
slug: "azure-ad-scout"
updated: 2026-07-08T13:38:43Z
published: 2026-07-08T13:38:43Z
canonical: "support.controlup.com/azure-ad-scout"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.controlup.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra ID Scout

Microsoft Entra ID (previously known as Azure Active Directory or AAD) users can create an Microsoft Entra ID Application Scout to test connectivity from a Custom Hive or Cloud Hive endpoint to the AAD endpoint at login.microsoftonline.com. You can measure the time it takes to send two HTTP GET requests to the AAD endpoint and view more detailed information on the HTTP requests and traceroute.

## Create an Microsoft Entra ID Scout

1. In the Synthetic Monitoring top bar, click **Create Scout** to open the **Add New Scout** window.
2. From the **Infrastructure** tab, select **Microsoft Entra ID** as the Scout **Type**.
3. Choose the locations (**Hives**) from which you want to test your Microsoft Entra ID.
4. Choose the Scout's **Authentication** method. You can select to authenticate a specific user with **OAuth** (only), or register the Scout as an application and give it permission to access your **Microsoft Entra ID**.
  - If you are authenticating a user with OAuth, click **Sign in with Microsoft** and sign in with a user that has permission to administer your cloud applications.

> [!NOTE]
> Note:
> 
> Temporary Access Pass (TAP) sign-in is not supported.
  - If you are authenticating the Scout as an application, follow these steps:
    1. Create a new App registration for the Scout in your Azure Portal. Visit the [Microsoft documentation](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app) for instructions.
    2. Grant the Scout application *Organization.Read.All* permission through Microsoft Graph API. Visit the [Microsoft documentation](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-access-web-apis#add-permissions-to-access-microsoft-graph) for instructions.
    3. In the Synthetic Monitoring **Add New Scout** window, enter your Microsoft Entra ID Tenant (directory) ID, Client (application) ID, and Client Secret.
5. Enter a **Name** for the Scout.
6. Select a run interval for the test using the **Run Every** slider. For the first 10 minutes of the run, you can choose intervals of 1 to 10 minutes. After that, you can choose increments of 5 minutes up to 60 minutes (5, 10, 15, 20, and so on).
7. Optionally, add **Tags** to your Scout. Tags are key-value pairs which can be used to organize your Scouts. To learn more about tags, visit [Centralized Tags Management](/v1/docs/centralized-tags-management).
8. Click **Next: Alert Policy** to set up alerts and notifications on the Scout before saving it. For more information, visit [Alert Policies](/tim-reorg/docs/alert-policies).

## Test Results

Wait for the first test results after you create your Microsoft Entra ID Scout. We have completed three results which we will examine in more detail in this section.

![](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/AzureADTestList.png)

Click a successful test to see more details.

If you are authenticating via OAuth, the test result shows the user query duration, which is the time it takes to get the current user's information, and the organization query duration:

![](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/AzureADOauthResult.png)

If you are authenticating via the Synthetic Monitoring app, the test result will show the login duration for the application, and the organization query duration:

![](https://cdn.document360.io/098100b7-b9da-4bea-b4b9-017140ab863e/Images/Documentation/AzureADApplicationResult.png)