I'm currently managing several Entra External ID tenants for different clients, and it's becoming quite challenging to keep them consistent. Each tenant has drifted from a standard configuration in various small ways, and there's no straightforward way to identify differences or implement changes across all of them. Right now, I'm using some Graph API scripts along with a folder of exported JSON files that I manually compare. Is there a better solution out there? I'm not looking for a full infrastructure as code approach, just something that can show me the differences between tenants.
2 Answers
If you already have a standard configuration in mind, a Powershell script could help by scanning for that setup and reporting any deviations. It seems like Graph API offers a lot of coverage for what you need, so you might want to lean into that.
Have you considered using M365 DSC? It's becoming Microsoft Tenant Configuration Manager, which might provide a more structured way to manage your configurations compared to just relying on scripts. Plus, it's backed by Microsoft, so you might find it a safer choice depending on your company policies.

Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures