Azure AD Information Test

Use this test to audit the inventory managed by Azure AD, and to track the usage of AD objects. The test proactively alerts you to abnormal object usage. The test also reveals whether the on-premises environment has successfully synched its identity data with Azure AD. If so, then the detailed diagnostics of the test will reveal when last was identity data synched between your on-premises environment and Azure AD. These details will help you figure out if there are any irregularities in synchronization services.

Target of the Test: A Microsoft Azure Active Directory

Agent deploying the test: A remote agent

Output of the test: One set of results for the Azure Active Directory tenant being monitored

Configurable parameters for the test
Parameters Description

Test Period

How often should the test be executed.

Host

The host for which the test is to be configured.

Tenant ID

Specify the Directory ID of the Azure AD tenant to which the target subscription belongs. To know how to determine the Directory ID, refer to Configuring the eG Agent to Monitor Microsoft Azure Active Directory Using Microsoft Graph API

Client ID, Client Password, and Confirm Password

To connect to Azure AD, the eG agent requires an Access token in the form of an Application ID and the client secret value. If a Microsoft Azure Subscription component is already monitored in your environment, then you would have already created an Application for monitoring purposes. You can provide the Application ID and Client Secret value of that application here. However, if no such application pre-exists, you will have to create one for monitoring Azure AD. To know how to create such an application and determine its Application ID and Client Secret, refer to Configuring the eG Agent to Monitor Microsoft Azure Active Directory Using Microsoft Graph API. Specify the Application ID of the Application in the Client ID text box and the client secret value in the Client Password text box. Confirm the Client Password by retyping it in the Confirm Password text box.

Proxy Host and Proxy Port

In some environments, all communication with the Azure cloud be routed through a proxy server. In such environments, you should make sure that the eG agent connects to the cloud via the proxy server and collects metrics. To enable metrics collection via a proxy, specify the IP address of the proxy server and the port at which the server listens against the Proxy Host and Proxy Port parameters. By default, these parameters are set to none, indicating that the eG agent is not configured to communicate via a proxy, by default.

Proxy Username, Proxy Password and Confirm Password

If the proxy server requires authentication, then, specify a valid proxy user name and password in the Proxy Username and Proxy Password parameters, respectively. Then, confirm the password by retyping it in the Confirm Password text box.

DD Frequency

Refers to the frequency with which detailed diagnosis measures are to be generated for this test. The default is 1:1. This indicates that, by default, detailed measures will be generated every time this test runs, and also every time the test detects a problem. You can modify this frequency, if you so desire. Also, if you intend to disable the detailed diagnosis capability for this test, you can do so by specifying none against DD frequency.

Detailed Diagnosis

To make diagnosis more efficient and accurate, the eG Enterprise embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the detailed diagnosis capability of this test for a particular server, choose the On option. To disable the capability, click on the Off option.

The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled:

  • The eG manager license should allow the detailed diagnosis capability
  • Both the normal and abnormal frequencies configured for the detailed diagnosis measures should not be 0.
Measures made by the test:
Measurement Description Measurement Unit Interpretation

Status

Indicates the current status of the target Azure AD tenant.

 

The values that this measure reports and their corresponding numeric values are listed in the table below:

Measure Value Numeric Value
Active 1
Inactive 0

Note:

By default, this measure reports the Measure Values listed in the table above to indicate whether/not target Azure AD tenant is active. In the graph of this measure however, the same is indicated using the numeric equivalents only.

Users

Indicates the number of users managed by the Azure AD tenant.

Number

 

Groups

Indicates the number of groups managed by the Azure AD tenant.

Number

 

Applications

Indicates the number of applications managed by the Azure AD tenant.

Number

 

Devices

Indicates the number of devices managed by the Azure AD tenant.

Number

 

Is on-premises synced?

Indicates whether/not the identity data is synchronized between on-premises environment and Azure AD.

 

The Azure Active Directory Connect synchronization services (Azure AD Connect sync) is a main component of Azure AD Connect. It takes care of all the operations that are related to synchronizing identity data between your on-premises environment and Azure AD.

The values that this measure reports and their corresponding numeric values are listed in the table below:

Measure Value Numeric Value
Yes 1
No 0

Note:

By default, this measure reports the Measure Values listed in the table above to indicate whether/not target the Azure Active Directory Connect synchronization service has successfully synched identity data. In the graph of this measure however, the same is indicated using the numeric equivalents only.

Use the detailed diagnosis of this measure to know when last identity data was synched between your on-premises environment and Azure AD. These details will help you figure out if there are any irregularities in synchronization services.

Used Azure AD objects

Indicates the number of Azure AD objects that are currently in use.

Number

 

Total Azure AD objects

Indicates the total number of Azure AD objects.

Number

 

Azure AD objects usage

Indicates the percentage of objects currently in use.

Percent

A value close to 100% implies that the target tenant is utilizing objects excessively.