Episode 423 – Non-Human Identities in Microsoft Entra with Eric Woodruff and Chris Brumm
Microsoft Cloud IT Pro PodcastShow Notes
Welcome to Episode 423 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben is live from Workplace Ninjas, joined by Eric Woodruff, Chief Identity Architect at Semperis and Microsoft MVP in Security focused on identity, and Chris Brumm, Cyber Security Architect at glueckkanja and Microsoft MVP in Security with over 16 years of experience in cybersecurity. Together they dig into the often-overlooked world of non-human identities in Microsoft Entra ID. They cover what service principals are, why they tend to fly under the radar compared to user accounts, and how attackers actively exploit that gap. The conversation spans credential management best practices, the risks of improper owner assignments, the challenges of multi-tenant app configurations, and why managed identities should be your go-to wherever possible. They also discuss the growing challenge of AI agent identities and what IT pros need to start thinking about now before that surface area explodes.
Show Notes
Eric Woodruff on LinkedIn
Eric Woodruff on X (@ericanidentity)
Eric on Identity
Chris Brum on LinkedIn
Chris Brumm on X (@cbrhh)
Chris Brumm’s Blog
Application and service principal objects in Microsoft Entra ID
Workload Identities
Securing service principals in Microsoft Entra ID
Securing managed identities in Microsoft Entra ID
Conditional Access for Workload Identities
Microsoft Entra Audit Logs
Microsoft Sentinel Detection Templates
Eric Woodruff
Eric Woodruff is the Chief Identity Architect at Semperis and a Microsoft MVP in Security with a focus on identity. He specializes in all things Microsoft Entra and Active Directory, with a passion for helping organizations understand and secure both human and non-human identities. You can find Eric on social media as @ericanidentity. Chris Brumm
Chris Brumm is a Cyber Security Architect at glueckkanja based in Germany, with over 16 years of experience across virtually every corner of cybersecurity. He is a Microsoft MVP in Security with a primary focus on identity security. His team operates SOC services and he brings a detection and response perspective to identity risk, helping organizations build lifecycle processes and monitoring strategies for non-human identities in Microsoft Entra.
About the sponsors
TrustedTech is a leading Microsoft Cloud Solution Provider (CSP) specializing in Microsoft Cloud services, Microsoft perpetual licensing, and Microsoft Support Services for medium and enterprise-sized businesses. Our robust team of in-house, U.S-based Microsoft architects and engineers are certified in all 6/6 Microsoft Solutions Partner Designations in the Microsoft Cloud Partner Program.
M365 Licensing Consultation
M365 Tenant Assessment
Copilot Readiness Assessment
At Intelligink, our focus is singular: the Microsoft cloud. Our Microsoft 365 and Azure experts help you work securely and efficiently by unlocking the full value of what you’re already paying for, so you can focus on running your business.
More from Microsoft Cloud IT Pro Podcast
Welcome to Episode 439 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott dig into two Azure agents with confusingly different names: the Azure Copilot Troubleshooting Agent and the Azure SRE Agent. Scott’s mental model is that the Troubleshooting Agent is the free, human-in-the-loop entry point built into the Azure portal. It runs as you, works one problem at a time, and opens a support request when it gets stuck. The SRE Agent is a paid operational platform with its own managed identity. It watches your logs, alerts, and repos, forms hypotheses, and can act in review or autonomous mode, much like a new member of your team.
Welcome to Episode 438 of the Microsoft Cloud IT Pro Podcast. Back in Episode 429, Ben and Scott introduced LLM wikis. In this episode, they come back a few months later to compare what those wikis turned into after real daily use: personalized work operating systems, or a WorkOS, that tie together tasks, meetings, research, communications, and recurring workflows. Scott walks through the skills that now run his day, from a 9:00 a.m. prioritization pass and meeting prep to meeting capture, end-of-day review, and clipping ingestion, all while keeping governed documents in Microsoft 365 where they belong.
Welcome to Episode 437 of the Microsoft Cloud IT Pro Podcast. In this episode, Nick Burling, Chief Product Officer at Nasuni, joins Ben and Scott to talk about getting unstructured file data ready for AI. Nick digs into why 70 to 80 percent of enterprise data sits in file shares and object storage, how that data tends to end up ungoverned and risky to point AI at, and Nasuni’s PSYCHIC framework for making it proprietary, secure, current, indexed, hybrid, and continuous. The conversation covers Nasuni’s AI Activate, the MCP based service that enforces permissions before a query ever runs, and the recent DryvIQ acquisition, which adds content classification, redaction, and policy enforcement on top of that index.
Welcome to Episode 436 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott dive into Microsoft Entra Tenant Governance. Almost nobody runs one Microsoft Entra tenant. Mergers, divestitures, dev and test environments, regional partitioning, that one AI proof-of-concept somebody spun up on a credit card. Organizations accumulate tenants the way they accumulate SharePoint sites. The difference is that nobody ever built an inventory of the tenants, and central IT frequently cannot name them, let alone say whether they are configured safely.
Welcome to Episode 435 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott take a lap around what’s new in Power BI, starting with the two MCP servers now in preview, one local and one remote, that can clean up your data model, write DAX for you, and turn a messy pile of tables into an actual usable semantic model. Ben shares how it helped him tame a 44 table QuickBooks Online mess, and why he had way better luck with it than with Copilot in Power BI.