Repository navigation
M365IdentityPosture v1.0.0 - Initial Release
I'm excited to announce the first release of M365IdentityPosture, a comprehensive PowerShell module for security posture assessment and identity governance reporting across Microsoft 365 and Azure environments!
🎯 Mission Statement
M365IdentityPosture is designed to help security administrators, compliance teams, and identity architects gain deep visibility into their Microsoft 365 security configurations. Starting with Authentication Context inventory, this extensible framework will grow to encompass comprehensive identity and security analytics across your entire Microsoft cloud estate.
✨ What's in v1.0.0
🔍 Authentication Context Inventory Report
This initial release delivers a complete Authentication Context assessment tool that provides:
Comprehensive Service Coverage
- 📋 Purview Sensitivity Labels - Discovers labels with embedded Authentication Context requirements and tracks their application across your environment
- 🔒 Conditional Access Policies - Maps all policies referencing Authentication Contexts, including target users, groups, and applications
- 👥 Privileged Identity Management - Analyzes PIM policies across:
- Directory role management policies
- Group-based PIM policies with role assignments
- Azure resource PIM policies (optional)
- 📁 SharePoint Online - Identifies sites with direct Authentication Context assignments or inherited through sensitivity labels
- 👥 Microsoft 365 Groups & Teams - Tracks context enforcement through sensitivity labels
- 🛡️ Protected Actions - Maps RBAC resource actions requiring authentication contexts
Rich Reporting Capabilities
- Interactive HTML Dashboard with executive summary metrics
- Detailed Inventory Tables with comprehensive data for each service
- Cross-Reference Analysis showing relationships between services
- Runtime Theme Switching between light and dark modes
- Export-Ready Data for further analysis and documentation
🚀 Getting Started
# Install from PowerShell Gallery
Install-Module -Name M365IdentityPosture -Scope CurrentUser
# Run your first report
Invoke-AuthContextInventoryReport -TenantName "yourcompany"💡 Use Cases
This module is perfect for:
- Security Assessments - Understand your Authentication Context implementation across all services
- Compliance Reporting - Document security controls for auditors and compliance teams
- Zero Trust Journey - Assess readiness and identify gaps in your conditional access strategy
- Migration Planning - Inventory current state before implementing changes
- Operational Insights - Identify unused or misconfigured authentication contexts
🔧 Technical Highlights
- PowerShell 7+ Optimized - Cross-platform support (Windows, macOS, Linux)
- Modular Architecture - Extensible framework ready for additional report types
- Smart Module Loading - Dynamically loads only required dependencies
- Memory Efficient - Handles large tenants with thousands of objects
- Comprehensive Error Handling - Detailed logging and graceful failure recovery
- Progress Tracking - Real-time progress bars for long-running operations
📋 Requirements
- PowerShell 7.0 or higher
- Global Reader or equivalent permissions in your Microsoft 365 tenant
- Required PowerShell modules (automatically loaded as needed):
- Microsoft.Graph SDK
- ExchangeOnlineManagement
- SharePoint Online PowerShell
- Az.Accounts & Az.Resources (for Azure PIM)
🗺️ What's Next?
This is just the beginning! The roadmap includes:
- Access Package Analytics
- Role Assignment Auditing
- Conditional Access Gap Analysis
- Identity Protection Insights
🤝 Community
M365IdentityPosture is open source and we welcome contributions! Whether it's:
- 🐛 Reporting bugs
- 💡 Suggesting enhancements
- 📝 Improving documentation
- 🔧 Contributing code
Check out our Contributing Guide to get started.
📣 Feedback
We'd love to hear from you!
- ⭐ Star the repository if you find it useful
- 🐛 Report issues
- 💬 Join the discussion
- 🌐 Follow updates on Chance of Security
🙏 Acknowledgments
Special thanks to the PowerShell community and early testers who provided valuable feedback during development.
📄 License
M365IdentityPosture is released under the MIT License, making it free for both personal and commercial use.
Ready to assess your Microsoft 365 identity security posture? Get started now!
This module performs read-only operations and will not modify any configurations in your tenant. Use the insights provided to enhance your security posture through informed decision-making.