In this webinar, we explore the real impact of unmanaged app permissions, breaking down the critical differences between delegated and application permissions. From user communication and access reviews to ongoing attestation and monitoring, you’ll learn how to build a proactive App Governance strategy that reduces your attack surface without slowing down business productivity.

What you’ll learn:

• The real risks of unused or excessive app permissions (e.g., the dangers of Mail.ReadWrite and Directory.ReadWrite.All).
• The critical differences between Delegated Permissions and Application Permissions.
• What “good” app governance looks like (least privilege, owner attestation, access reviews, and lifecycle management).
• How to proactively manage and monitor apps at scale to prevent OAuth abuse.
• Practical steps to improve visibility, fix misconfigurations, and regain control today.

Most organizations know they have application risk in Entra ID. Far fewer know where to start, what to prioritize, or how to operationalize governance without slowing the business.

In this session we lay out a practical, phased roadmap for securing applications in Entra ID, from visibility and risk assessment to policy enforcement and automation.

What You'll Learn

• How to inventory and classify applications by risk, access, and business impact

• What “good” application governance looks like at each maturity stage

• Where Microsoft-native controls stop short for modern app security

• How to apply least privilege and lifecycle ownership to apps at scale

• A realistic roadmap for reducing app attack surface without breaking integrations

In this session, we break down the identity threat patterns shaping 2026 and what they reveal about where defenses are failing today. Drawing from real-world breaches, Microsoft advisories, and AppGov telemetry, we show how attackers are abusing OAuth, service principals, legacy permissions, and unattended access paths to persist undetected.

What You’ll Learn

• The top identity attack techniques threat actors are using against Entra ID today

• Why applications and non-human identities are becoming the preferred entry point

• How OAuth abuse, excessive permissions, and ownerless apps enable long-term access

• Which identity controls are breaking down at scale and why
• Early warning signals that indicate elevated identity risk inside your tenant

Microsoft is driving unprecedented change, eliminating traditional discounts, support expectations are shifting, and AI-driven SKUs are becoming mandatory. For IT Directors, Procurement Managers, and Licensing Owners, the complexity and cost are skyrocketing. 

Watch as our experts present a focused, action-oriented webinar designed to cut through the chaos, provide strategic guidance, and save your organization money that can be reinvested into priority projects.

You’ll walk away with actionable tips to: 

• Navigate AI/Copilot mandates 
• Decode the new discount landscape
• Leverage CSP flexibility against more rigid EAs
• Find hidden savings to fund new projects
• Reduce AI risk before you deploy
• Ensure user adoption readiness 
• Understand the n

The boundaries of identity are expanding fast. Every new application, automation, and AI agent connected to Microsoft Entra ID represents a new identity and a new risk. With the rise of low-code innovation and Copilot Studio, organizations are facing “agentic sprawl” where every workflow and integration becomes an application that must be governed under Zero Trust.

What You’ll Learn

• How to extend Zero Trust beyond human identities to applications and agents
• Application governance principles your DevOps and DevSecOps teams must adopt
• How low-code tools like Power Platform and Copilot Studio increase risk and how to manage it
• Practical steps for reducing “agentic sprawl” in Entra ID
• Best practices for continuous application governance and security automation

Zero Trust isn’t a product; it’s a principle. As organizations modernize their identity infrastructure in Microsoft Entra ID, many find that traditional approaches no longer scale to today’s hybrid, application-driven environments. 

What You’ll Learn

• How to build Zero Trust resilience through effective identity lifecycle management
• Strategies to isolate and govern Non-Human Identities (service principals, app registrations, automation agents)
• How to apply least privilege to application security in Entra ID
• Techniques to verify explicitly and prepare for breach scenarios
• How unified visibility and automation can accelerate Zero Trust adoption

Microsoft Entra ID powers identity and access across Microsoft 365, but when it comes to third-party and internal app governance, visibility and control are often lacking. In this webinar, you’ll learn how ENow App Governance Accelerator empowers you to:

• Identify risky OAuth and over-permissioned apps in your tenant
• Understand the gaps in Microsoft’s native governance capabilities
• Reduce your Entra ID application attack surface
• Automate app remediation and credential monitoring

In this actionable webinar, Microsoft licensing experts Ben Marshall and Nikki Vijeh will share a step-by-step EA Contract Review Checklist, built from real-world experiences, to help you navigate post-MCA challenges and secure the best possible Microsoft renewal outcome.

You'll learn:

Learn how attackers target workload identities like service principals in Microsoft Entra ID due to their elevated privileges and weak controls. This webinar covers risks like credential misuse and excessive permissions, drawing parallels with user account security.

You'll learn:

• Understand vulnerabilities in workload identities.

• Explore risks from excessive access and misuse.

• Gain strategies for Conditional Access, least privilege, and monitoring suspicious activity.

Uncover how misconfigured app permissions in Microsoft Entra ID allow attackers to exploit excessive privileges. This webinar explores vulnerabilities like improper app ownership and unconstrained permissions, with real-world examples like the Midnight Blizzard attack.

You'll learn:

• Learn how attackers exploit misconfigured app permissions.

• Understand risks from excessive privileges like Mail.ReadWrite.

• Gain strategies for least privilege, access controls, and monitoring with PowerShell and security scanners.

Register now to protect your Entra ID applications!

Microsoft Entra ID is central to securing access in Microsoft 365 and Azure, but recent findings reveal vulnerabilities that could let attackers escalate privileges to global admin.

Learn how to identify and mitigate these threats with real-world examples, and discover practical strategies such as enforcing least privilege, hardening service principals, and strengthening Conditional Access. 

• Understand the technical details behind privilege escalation vulnerabilities in Microsoft Entra ID.
• Learn how attackers exploit authentication flows and service principal permissions.
• Discover best practices for securing your Entra ID environment against unauthorized privilege elevation.

 

 

Watch for a practical session where Microsoft MVPs Nicolas Blank and Alistair Pugin lay out a 100-day roadmap to clean up and secure your Entra ID application environment. We’ll break down key focus areas—Enterprise Apps, App Registrations, Hunting, and Tenant Settings—and give you clear measures of success.

In this webinar, you'll learn:

• How to assess your current Application Governance risk posture
• Key milestones for your first 100 days of App Gov cleanup
• Steps to remediate risky app permissions and configurations
• Measures of success along the way

Alistair Pugin and Nicolas Blank explore:

• ✅ The top 5 challenges of provisioning applications—and how to overcome them
• 🐶 Why application security is a “Dog Eat Dog” world (and how to protect your org)
• ⚠️ Critical governance measures you must implement today
• 🚨 The #1 problem with Application Governance in Entra ID—and how to fix it

Key Takeaways: 

• The evolution of Microsoft licensing models 
• MCA vs. MCAE vs. EA: Key differences and comparison 
• Pros and cons of each agreement type 
• How Microsoft’s new approach borrows CSP flexibility 
• Considerations for choosing the proper agreement

Come along to Episode 1 of ENow’s Season 3 of its Preventive Maintenance show to find out what the hosts, Nic and Al, believe companies should focus on in 2025 in the world of Application Governance. They’ll be covering:

• Where Microsoft sees the world going
• Does AI really matter in Identity Security
• Recapping the most significant breaches of 2024
• And why Application Governance is for everyone

• Latest Licensing Updates
• Licensing Environment Exploration
• Data-Driven Insights
• Strategic Preparation
• Resources & Support

As applications proliferate in Entra ID, organizations' attack surface and risk profile increases. Understanding how to prioritize risks, address vulnerabilities, and create an ongoing governance plan becomes essential for protecting your organization. In this webinar, industry experts Nicolas Blank and Alistair Pugin will walk you through the key steps to create a robust risk profile for your Entra ID applications. 

During this session, you’ll learn how to: 

• Identify and categorize applications based on their criticality and risk level. 
• Prioritize actions based on real-world threat scenarios and business impact. 
• Develop a clear action plan to tackle the most important security risks. 
• Implement best practices for ongoing risk monitoring using AppGov Score

With the adoption of cloud-based applications and hybrid work environments, the security perimeter is redefined from firewall-based security to Identity based security. Zero Trust offers a more proactive and granular approach to security, assuming that no entity within or outside the network should be trusted without continuous verification. In this session, we explore how Microsoft Entra ID can be leveraged to implement Zero Trust principles for application security. 

We discuss the key benefits of Zero Trust, including: 

• A unified security strategy using what you already own
• Protecting applications from unauthorized access and data breaches
• Minimizing the impact of security incidents
• Enabling secure and seamless access to applications

With changes underway in how Microsoft delivers, bundles, and classifies Microsoft 365 licensing, it is essential to understand how these changes can affect your organization.     

In this session Ben Marshall, HP's Global Head of Sales for Microsoft Licensing and Enterprise Agreements, will provide clarity around the future of licensing. We will discuss:  

• Microsoft changes impacting licensing
• Developing a Microsoft 365 licensing strategy 
• Future licensing options  
• Tips, recommendations, and solutions 

While security standards and frameworks like NIST,  ISO 27001, and FISMA exist, many organizations are still figuring out how to apply them specifically to Entra ID enterprise applications.  

How do you eat an elephant? One bite at a time.  
In this webinar Nicolas Blank and Alistair Pugin will talk through:  

• Underlying principles of common security frameworks  
• How application security and governance fit into these standards  
• What immediate changes you can make to secure enterprise applications to meet standards 

With application deployment in the Microsoft cloud as easy as adding a Teams app, Identity, and Security administrators have been inundated with applications popping up in their tenants, with very little knowledge about what they are and what they do. Yes, you should be worried.

In this session, we focus on the critical checks you should perform to ensure a better security posture. We cover:

• How to get started
• Working through a risk matrix
• The top 10 app security and governance checks
• Building a remediation plan

Understand the 'red flags,' most significant risks, and challenges companies face and unlock the secrets of SaaS Security Posture Management. With SaaS applications integrated heavily into our Microsoft 365 and Entra ID tenants and user identities, ensuring their security is more critical than ever. In this webinar, we will share:  

• Surprising Findings: Eye-opening security flaws and vulnerabilities discovered in Enterprise Applications, App Registrations, and Entra ID tenant settings.  
• Real-world Challenges: Common hurdles and security gaps that could be putting your organization at risk.  
• Actionable Insights: Practical steps and strategies to bolster your cloud security posture.  

Are you ready to elevate your organization's collaboration and productivity to new heights with Microsoft Teams? In today's fast-paced digital landscape, effective management of Microsoft Teams adoption, monitoring, and governance is crucial for success.  We'll show you: 

• Proven techniques for accelerating adoption and maximizing user value from Microsoft Teams. 
• Comprehensive approaches to monitoring Teams performance and addressing potential issues proactively. 
• Strategies for establishing robust governance policies to safeguard data integrity and ensure compliance. 
• Practical insights and actionable steps to optimize your Teams management practices and drive tangible results. 

Drawing from a decade of practical, hands-on experience with Entra ID (A.K.A. - Azure Active Directory), Nicolas Blank and Alistair Pugin share key strategies and methodologies to streamline Entra ID deployment while ensuring adherence to compliance, bolstered security, and operational efficiency. In this session, we cover: 

• Defining Clear Policies and Roles 
• Implementing Robust Access Controls 
• Designing and enforcing access control mechanisms 
• Harnessing Entra ID features 
• Monitoring and Auditing Mechanisms 
• Addressing User and App Lifecycle Management Challenges 
• Role Mapping and Privileged Access Management 

Join Alistair Pugin and Nicolas Blank as they walk you through identifying risky apps in your Entra ID tenant and, more importantly – the steps you need to take next to fix and securely configure applications. They’ll focus on things like:

• How applications are deployed 
• What security really means in Entra ID 
• How to make sure that your applications are secured 
• How to continuously evaluate your Application Security Posture

Just because a vendor automates the deployment of applications in Entra ID, doesn’t mean that these applications are locked down and hardened correctly in your tenant, as witnessed in the Midnight Blizzard attack on Microsoft. Don’t be a sitting duck - watch the recording and discover precisely what you need to look for and act on to ensure that your app stack is protected and governed.  

In this exclusive session, Garth and co-host Robert Hinger, ENow’s Enterprise Technical CSM, will guide you through real-world scenarios and showcase how ENow’s GALsync tool simplifies syncing woes into a streamlined and successful endeavor. You'll gain invaluable knowledge, including: 

• Tales of GAL syncing gone awry – straight from the field. 
• The critical importance of nailing GAL syncing right from the start. 
• Important considerations for a hybrid environment. 
• The transformative power of automation in scenarios like Mergers, Acquisitions, Divestitures, migrations, and across various communication protocols. 
• How the ENow GALsync solution makes sense for your organization

Microsoft MVPs Alistair Pugin and Nicolas Blank explore the top 5 risks associated with application security and more, including:

• A break down of the recent "Midnight Blizzard" attack on Microsoft
• Injection attacks
• Broken authentication and session management
• Sensitive data exposure
• Security misconfiguration
• Insufficient logging and monitoring

Learn what to look for in your Entra ID environment, how to find it, and what to communicate to your dev team to ensure maximum efficacy and security around application governance for your organization.

For most organizations, Entra ID (formerly Azure AD) applications are a ticking time bomb, a security risk that is now forcing CISOs to view these vulnerabilities under a magnifying glass. Whether internal developers are creating applications or employees are purchasing 3rd party shadow IT solutions, many organizations are continuously - and unknowingly! - integrating these apps into Entra ID despite the ramifications.

A round-table of industry experts provide best practices when it comes to application governance, walking you through the following:

• How to accurately find rogue and orphaned apps in your tenant
• What to look for when locking down risky applications
• How to lower your attack surface and application profile risk

As you remove and clean up risky apps, track your progress along the way with a solution that also provides recommendations.

In today’s cloud-first, Microsoft-dominated world, many organizations have migrated or are in the process of migrating Workplace productivity solutions to Microsoft 365 platforms. With any major technological infrastructure change comes a host of new administrative, maintenance and management challenges.

Nicolas Blank, dual MVP for Microsoft 365 Apps and Services and Azure, Microsoft Certified Master for Exchange and Microsoft 365 and Alistair Pugin, Microsoft 365 and Security MVP, help admins navigate evolving Microsoft 365 nuances:

1. How M365 monitoring is evolving in a hybrid-cloud world
2. Mitigating common challenges around Teams Call Quality
3. How to adhere to Governance policies and minimize usage impacts without losing your mind
4. How to identify users that need training and increase adoption
5. Doing more with less - supporting finance with license renewals

It's absolutely necessary for organizations to have a proactive approach to Microsoft 365 monitoring, and easily access data needed to make important decisions that improve overall end-user experience, productivity, and contribute to the bottom line.

Ben Marshall, Global Product Lead for Microsoft Licensing at HP Inc. and ENow CEO Jay Gundotra outline best practices for M365 Licensing Optimization.

Jay and Ben guide you on how to achieve major cost savings with different techniques and leading-edge Licensing Optimization Reports; Eliminate License Sprawl and prevent over-purchasing from happening in the future; and how to manage license purchase and usage more efficiently with reporting tools that provide visibility into utilization, and easily identify candidates for Licensing Optimization.

In this on-demand webinar, Microsoft MVP Sander Berkouwer and ENow CEO Jay Gundotra clear up common misconceptions for Active Directory admins. Get ready to learn about the intricacies of monitoring all aspects of Active Directory and gain valuable insights around detailed reporting. But more importantly, learn how to do Active Directory right, so even if it is the oldest technology in the house - you don’t have to worry about the solution suddenly dying on you.

There is a difference between Active Directory monitoring and Domain Controller monitoring. There are also differences between monitoring and reporting. 

Microsoft MVP Sander Berkouwer and ENow CEO Jay Gundotra provide insight on monitoring Active Directory’s vitals, but also your Domain Controllers’, and DNS and NTP. Get ready to learn the intricacies of monitoring all aspects of Active Directory. Most importantly, learn how to do Active Directory right so it doesn’t become a liability to your organization.

Do you know how to monitor, manage, and, most importantly, troubleshoot Microsoft Teams call quality across your tenant? When you deployed Microsoft Teams, the chances are that you spent little time worrying about call quality.

Microsoft MVPs Tom Arbuthnot and Ben Lee cover the following topics:

• Best way to use the Microsoft Native tools, including the Teams Admin Center and Call Quality Dashboard
• Identify the main factors that influence Microsoft Teams calling quality
• How you can augment them with simple-to-use and clear dashboards that give you quick access to the key metrics