We’re happy to hear you care about security – we do too.
EasyEntra follows state-of-the-art Microsoft best practices by performing all Entra ID and Exchange Online authentication via OAuth2. OAuth2 supports MFA and ensures EasyEntra can never know your admin credentials. After successful authentication, EasyEntra receives an access token used to perform license and mailbox management in Entra ID and Exchange Online.
To avoid logging on every time you start the application, EasyEntra caches the token in your user profile on disk. The token is persisted via the Windows Data Protection API, ensuring that the token is protected by your Windows credentials and the local computer credentials.
To provide an extra layer of security EasyEntra “salts” the encrypted token before persisting it. So effectively, you can only access it via EasyEntra, and while being logged in to the system where it’s stored.
As the token is stored in your user profile, this also means EasyEntra follows the security best practice of using individual credentials. Therefore, all admins must configure EasyEntra with their personal Entra ID credentials. By using individual credentials, you can monitor all changes through the unified audit log in Entra ID.
