News

Microsoft Commercially Releases Entra Workload Identities

Microsoft announced on Monday that its Entra Workload Identities service is now available as a commercial product offering, having reached the "general availability" stage.

By workload identities, Microsoft means the identities that are used by applications, containers, virtual machines and services. These non-human identities are typically used in some process, such as gaining access to other services, like the Microsoft Graph or Azure Storage. Workload identities have become greater targets for attackers as the security for human identities has improved, Microsoft's announcement argued.

Microsoft Entra Workload Identities lets organizations set Conditional Access policies, such as blocking compromised apps or services and access attempts from nontrusted locations. There's also an Identity Protection capability for things like "compromised credentials, anomalous sign-ins, and suspicious changes to accounts." An Access Reviews capability permits overall assessments of workload identity permissions, too. These three capabilities all reached the general availability stage back in June.

The cost to use Microsoft Entra Workload Identities is priced at $3 per workload identity per month. There's also a free 90-day trail available through the Microsoft Azure Portal.

Microsoft is planning to add a new features to the product. One new feature that's expected to arrive by the "end of November" in preview form will allow organizations to detect "unused apps, expiring credentials and unused credentials." When it's available, this preview will be known as "App Health Recommendations in Azure AD Recommendations," the announcement indicated.

Workload Identities is yet another addition to the Microsoft Entra product line. Microsoft rebranded its identity services with the "Entra" label back in May. Other Microsoft Entra products include Azure Active Directory, Permissions Management and Verified ID.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

  • Microsoft Dismantles RedVDS Cybercrime Marketplace Linked to $40M in Phishing Fraud

    In a coordinated action spanning the United States and the United Kingdom, Microsoft’s Digital Crimes Unit (DCU) and international law enforcement collaborators have taken down RedVDS, a subscription based cybercrime platform tied to an estimated $40 million in fraud losses in the U.S. since March 2025.

  • Sound Wave Illustration

    CrowdStrike's Acquisition of SGNL Aims to Strengthen Identity Security

    CrowdStrike signs definitive agreement to purchase SGNL, an identity security specialist, in a deal valued at about $740 million.

  • Microsoft Acquires Osmos, Automating Data Engineering inside Fabric

    In a strategic move to reduce time-consuming manual data preparation, Microsoft has acquired Seattle-based startup Osmos, specializing in agentic AI for data engineering.

  • Linux Foundation Unites Major Tech Firms to Launch Agentic AI Foundation

    The Linux Foundation today announced the creation of a new collaborative initiative — the Agentic AI Foundation (AAIF) — bringing together major AI and cloud players such as Microsoft, OpenAI, Anthropic and other major tech companies.