Episode 423 – Non-Human Identities in Microsoft Entra with Eric Woodruff and Chris Brumm
Welcome to Episode 423 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben is live from Workplace Ninjas, joined by Eric Woodruff, Chief Identity Architect at Semperis and Microsoft MVP in Security focused on identity, and Chris Brumm, Cyber Security Architect at glueckkanja and Microsoft MVP in Security with over 16 years of experience in cybersecurity. Together they dig into the often-overlooked world of non-human identities in Microsoft Entra ID. They cover what service principals are, why they tend to fly under the radar compared to user accounts, and how attackers actively exploit that gap. The conversation spans credential management best practices, the risks of improper owner assignments, the challenges of multi-tenant app configurations, and why managed identities should be your go-to wherever possible. They also discuss the growing challenge of AI agent identities and what IT pros need to start thinking about now before that surface area explodes.
Show Notes
- Eric Woodruff on LinkedIn
- Eric Woodruff on X (@ericanidentity)
- Eric on Identity
- Chris Brum on LinkedIn
- Chris Brumm on X (@cbrhh)
- Chris Brumm’s Blog
- Application and service principal objects in Microsoft Entra ID
- Workload Identities
- Securing service principals in Microsoft Entra ID
- Securing managed identities in Microsoft Entra ID
- Conditional Access for Workload Identities
- Microsoft Entra Audit Logs
- Microsoft Sentinel Detection Templates
Eric Woodruff is the Chief Identity Architect at Semperis and a Microsoft MVP in Security with a focus on identity. He specializes in all things Microsoft Entra and Active Directory, with a passion for helping organizations understand and secure both human and non-human identities. You can find Eric on social media as @ericanidentity.
Chris Brumm is a Cyber Security Architect at glueckkanja based in Germany, with over 16 years of experience across virtually every corner of cybersecurity. He is a Microsoft MVP in Security with a primary focus on identity security. His team operates SOC services and he brings a detection and response perspective to identity risk, helping organizations build lifecycle processes and monitoring strategies for non-human identities in Microsoft Entra.
About the sponsors
Published on:
Learn moreRelated posts
Episode 433: Passkeys, Passwords, and the End of SMS MFA
Welcome to Episode 433 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott discuss how Microsoft 365 authentication is movin...
Episode 432: AI-Era Consulting Billing for Microsoft Cloud Delivery
Welcome to Episode 432 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott discuss how AI is not eliminating Microsoft 365 a...
Episode 431: Agent Governance Is the New App Governance
Welcome to Episode 431 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott get into why agent governance is quickly becoming...
Episode 430: Scouting out Microsoft Scout
Welcome to Episode 430 of the Microsoft Cloud IT Pro Podcast, where Scott and Ben dig into Microsoft Scout, the new desktop AI application ann...
Episode 429: Getting started with LLM Wikis
Welcome to Episode 429 of the Microsoft Cloud IT Pro Podcast. In this episode, Scott and Ben dig into the concept of LLM wikis, specifically b...
Episode 428: Migrating Group Policy to Microsoft Intune
Welcome to Episode 428 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott unlock the secrets to modernizing your IT managem...
Episode 427: Copilot Cowork Hands-On Experiences
Welcome to Episode 427 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott open with a quick look at YAKO (getyako.com), a b...
Episode 426: Claude Cowork vs Microsoft 365 Copilot Cowork
Welcome to Episode 426 of the Microsoft Cloud IT Pro Podcast.Ben and Scott are back together this week to talk through Microsoft 365 Copilo...
Episode 425 – Exploring Collaboration and Governance at the MVP Summit with Joy Apple
Welcome to Episode 425 of the Microsoft Cloud IT Pro Podcast. In this audio and video episode recorded live at Microsoft headquarters durin...
Episode 424 – A new frontier for Microsoft 365 with E7
Welcome to Episode 424 of the Microsoft Cloud IT Pro Podcast. In this episode, Ben and Scott dig into the newly announced Microsoft 365 E7 ...

