top of page
Get the OAuth Security Checklist
(Microsoft 365 / Entra ID)
A practical checklist to discover connected apps (OAuth), review risky permissions, and prevent illicit consent grants - built for IT & security teams.
Identify risky scopes (mail, files, send-as, tenant-wide permissions)
Review service principals, owners, and publisher trust
Lockdown consent + route approvals the right way
Incident response steps: revoke tokens, remove apps, retain evidence
Download the checklist
What you'll get:
PDF checklist + reviewer prompts
Scope risk tiers (high/medium/low examples)
A simple IR mini-playbook for malicious consent
Want help operationalizing this? Book a demo to see how AppGuard360 speeds discovery and clean up.
bottom of page