AppTooling - Entra ID Admin Toolkit for Identity Operations
por AppConfig Squared
Audit consents, rotate credentials, and configure tokens—10 focused Entra ID tools, no scripting.
Reduce risk and reclaim hours on Entra ID administration—without writing PowerShell or jumping between portal blades.
AppTooling is a focused SaaS toolkit for Entra ID administrators, DevSecOps engineers, and identity architects who need precise control over application registrations and service principals. Ten purpose-built tools consolidated in a single secure SPA eliminate the gap between the Azure Portal's form-based UI and full scripting—making advanced identity operations fast, safe, and accessible at any skill level.
Key Benefits
- Hours → Minutes: Complete consent audits, credential rotations, and claims configurations without writing a single script
- Risk-Free Changes: Every write operation triggers an automatic backup and a confirmation dialog—revert any mutation with one click
- Security-First Design: Authorization Code Flow with PKCE, session-only token storage, no backend, and confirmation on every DELETE/PATCH/POST
- Zero Context-Switching: All ten tools in one dashboard—no juggling between Entra portal blades, Graph Explorer, and PowerShell windows
Key Features
- Consent Manager – Audit and revoke OAuth 2.0 permission grants across your tenant; distinguish admin vs. user consent with exact grant attribution
- Credential & Secret Manager – Color-coded expiry monitoring for client secrets and certificates; configurable lifetimes; secrets displayed once, never persisted
- Federated Identity Credentials – Guided workload identity federation setup for GitHub Actions, Azure DevOps, Kubernetes, and Google Cloud via templates—eliminating long-lived secrets
- Claims Mapping Policy Tool – Full CRUD for claims mapping policies with built-in templates and direct service principal assignment
- Optional Claims Editor – Structured UI for ID token, access token, and SAML2 token claim configuration—no manual JSON editing required
- Manifest Editor – Syntax-highlighted JSON editing with JSON Merge Patch diff detection and change validation
- AppRole Assignment Manager – Manage app role assignments from both the principal and resource perspectives
- Graph Explorer – Execute arbitrary Microsoft Graph REST calls with just-in-time consent and response syntax highlighting
- JWT Token Decoder – Client-side token analysis with automatic type detection and annotated claim breakdown
- Backup & Restore – Automatic pre-mutation snapshots across app registrations, service principals, OAuth2 permission grants, and claims mapping policies
Who Should Use AppTooling
- Entra ID Administrators managing consent cleanup, credential rotation, and permission governance across tenants
- DevSecOps Engineers configuring CI/CD workload identity federation to eliminate long-lived secrets from pipelines
- Identity Architects designing custom token shapes for SSO, claims customization, and API authorization scenarios
- Developers testing Microsoft Graph API calls and decoding JWT tokens during integration development
- Security & Compliance Teams auditing OAuth permission grants, credential expiry status, and application attack surface exposure
Why AppTooling
AppTooling is purpose-built for identity operations that fall between "too simple for scripting" and "too complex for the portal." Every tool includes guided workflows, templated configuration, and write-confirmation safeguards—so your team executes advanced Entra ID operations confidently, regardless of PowerShell expertise.
As part of the AppConfig² suite, AppTooling complements AppConfig (token configuration and testing), AppTesting (authentication flow validation), and AppDashboard (tenant-wide analytics), providing end-to-end coverage of the Microsoft Entra ID application lifecycle.