Notifications
Clear all
Microsoft Entra ID Reviews
1
Posts
1
Users
0
Reactions
1
Views
Topic starter
19/07/2026 4:18 am
We need to run automation (scripts, CI/CD jobs) that interact with Microsoft Entra ID protected APIs. User-based MFA breaks everything. Service accounts shouldn't have a phone app.
What's the actual production-grade solution here?
Seen a few options, all with trade-offs:
* App Registrations with client secrets/certificates (no MFA)
* Conditional Access policy exclusions for specific service accounts (security risk)
* Managed Identities for Azure resources (only works within Azure)
Which one do you use, and what's the catch? Looking for the least fragile setup.