How to setup email alerts notification for Enterprise apps and registered apps in Entra ID for the certificates which are going to be expire in next 30 or less days so we can take appropriate actions like renew the certificate and add additional once as r

Question

How to setup email alerts notification for Enterprise apps and registered apps in Entra ID for the certificates which are going to be expire in next 30 or less days so we can take appropriate actions like renew the certificate and add additional once as required?

Is there any way via PowerShell or MS Graph or any other way which will help on this.

Answer 1

You can use the built-in app credential activity report: https://learn.microsoft.com/en-us/entra/identity/monitoring-health/concept-usage-insights-report?tabs=microsoft-entra-admin-center#application-credential-activity-preview

Or the expiring credentials Entra ID "recommendation": https://learn.microsoft.com/en-us/entra/identity/monitoring-health/overview-recommendations#recommendation-availability-and-license-requirements

Or you can build your own report based on PowerShell or the Graph API. I have some samples here: https://www.michev.info/blog/post/5940/reporting-on-entra-id-application-registrations