Admin tools
Free tools for the jobs that come up every week. They all run in your browser, so tokens, logs and SAML never leave your machine.
Decode and diagnose
Sign-in log explainer
Paste a sign-in event from Entra and get a plain-English account of what happened and why.
SAML decoder
Decode a SAMLRequest or SAMLResponse and spot common SSO problems.
JWT decoder
Decode an Entra access or ID token and see what each claim means.
Troubleshooting wizards
Step-by-step paths for sign-in failures, non-compliant devices and SSO errors.
Conditional Access visualiser
Load your policies as JSON, see each in plain English and check them against a baseline.
Look it up
GUID lookup
Identify any Microsoft app, Entra role or Graph permission GUID from a log or token.
AADSTS error lookup
Common sign-in error codes, explained with what to check.
Graph permission explainer
What a permission allows, how risky it is, and a least-privilege alternative.
Which licence do I need?
Find which Entra and Intune licences include a feature.
MSOnline & AzureAD to Graph
Translate retired PowerShell cmdlets to Microsoft Graph PowerShell.
Plan and check
Save time
User comms templates
Ready-to-send emails for passkeys, MFA changes, compliance and more.
Change request generator
Fill in a short form and get a complete change request with risk and rollback.
Script library
Every PowerShell, CLI, Graph and KQL snippet on this site, searchable, with a copy button.
KQL library
Ready-to-use Log Analytics queries from posts on this site.
Practice quiz
Test yourself on Entra ID, Intune and Azure, or study with flashcards.