SoD and Zero Trust

Our company wants to start a more aggressive enforcement of Segregation of Duties by using an outside tenant with 3rd party applications to control our RBAC. We currently operate out of Azure and heavily scrutinize Entra Id roles and access with PIM and Access policies, we also use CA to control where you can access from. They would like to set up an app reg within our azure that would act on behalf of an external identity.

This would break …

access applications azure control cybersecurity enforcement entra entra id party pim policies rbac roles start trust zero trust