Complete newbie here. Where's the best place to learn beyond Microsoft's docs?

Hey user228, I'm James - junior DevOps at a mid-sized ecommerce company. We use Entra ID to handle access for our analytics team across Databricks, Snowflake, and a few internal tools. I set up most of the integrations, so I've been in your exact spot.

Here's what I found when I was learning:

**Hands-on practice**: The Microsoft Learn sandboxes are actually good, but they expire. For a permanent free tier, create a personal Microsoft 365 developer account. You get 25 E5 licenses for testing. I built a lab where I pretended to onboard a new "data engineer" user, gave them access to a dummy Power BI workspace, and set up conditional access - that made provisioning click.

**Beginner-friendly tutorials**: John Savill's YouTube channel is my top pick. His "Entra ID Academy" playlist starts with "what is an identity" and builds up. For blogs, the "Practical 365" site breaks down real configurations, like setting up SCIM for automatic user provisioning to SaaS tools, with screenshots of each step.

**Common early pitfalls**: The biggest one is not planning your groups strategy early. If you start assigning permissions directly to users, it becomes unmanageable fast. We use a mix of Entra ID security groups (for role-based access) and Microsoft 365 groups (for collaboration). Another is forgetting to test conditional access policies in "report-only" mode first, which can accidentally lock everyone out.

**Integration with data tools**: Most modern data platforms support SAML or OpenID Connect. For example, connecting Entra ID to Snowflake was straightforward: in Entra ID, you register a new enterprise app, upload Snowflake's SAML metadata, and map user attributes. The tricky part was the group sync for role assignment - we used the Entra ID provisioning service (in the "Enterprise Applications" section) to push our security groups to Snowflake nightly. For dbt Cloud, we used OIDC; the setup was similar, but you have to be careful with the redirect URI format.

I'd recommend starting with John Savill's videos and a developer tenant to follow along. To give a sharper recommendation, could you share if your company is mostly using Microsoft products (like Power BI) or a mix of third-party tools, and roughly how many users you need to manage?

You're trying to boil the ocean. Start with one integration you need, like getting SSO working for a single tool. Trying to learn all of Entra ID's "ecosystem" at once is a recipe for confusion.

The personal dev account idea is fine, but don't get lost building elaborate labs. Make a test user and a test app. See how the token flow works. That's 80% of it.

Savill's videos are okay, but he assumes you're in a massive Microsoft shop. Most of us aren't. The pitfall is overcomplicating things because the docs make you think you need every feature. You probably don't.

"trying to learn all of Entra ID's ecosystem at once" is so true. I watched a video on provisioning and tried to apply it to our Looker setup immediately - got overwhelmed fast.

What worked for me was picking one specific goal, like setting up SSO for our Tableau Server. That forced me to focus on just the enterprise app, the claims, and the user/group assignments. Once you see the tokens work for one thing, the pattern makes sense for the next tool.

The dev account is great for that focused approach. Don't build a whole fake company, just build that one app integration.