XIA Configuration Server

Microsoft Entra ID Documentation Tool

Automate the documentation of your Microsoft Entra ID tenants, including Conditional Access, PIM, dynamic groups, applications, roles, users, license assignments, Cloud Sync, and expiring credentials - all generated automatically with XIA Configuration Server.

Start your free trialView example document
The Entra directory icon.

Detect and Visualize Entra ID Relationships

XIA Configuration automatically detects and maps relationships and displays them in an interactive visualization showing key information instantly.

Try the live demo now.

Visual relationship map of an Entra directory showing conditional access policies, domains, external relationships, and support provisions created by XIA Configuration.
XIA Configuration automatically generates visual relationship maps showing the hierarchy of conditional access policies, domains, external relationships, and support provisions.

Conditional Access Support

XIA Configuration supports the ability to document detailed information about your Microsoft Entra ID Conditional Access policies, providing full visibility of your tenant’s authentication and access controls.

  • Policy configuration including assignments, conditions, and grant controls.
  • User, group, and application targeting.
  • Session controls and authentication strength requirements.
  • Enabled, report‑only, and disabled policy states.
  • Policy relationships and impact analysis.


View more information.


The Entra Conditional Access icon.

Cloud Sync Support

XIA Configuration supports the ability to document detailed information about your Microsoft Entra ID Cloud Sync configurations, providing full visibility of your directory provisioning flows between on‑premises Active Directory and Microsoft Entra ID.

  • Discovery of all Cloud Sync agents, including machine names, status, and associated domains.
  • Documentation of Cloud Sync configurations, including sync direction, domain scope, and operational status.
  • Full visibility of scoping filters used to determine which objects are included in each provisioning flow.
  • Detailed object mappings showing how users, groups, contacts, and inetOrgPerson objects are transformed and synchronized.
  • Attribute‑level mapping documentation, including direct flows, expressions, constants, and writeback‑supported attributes.


View sample Cloud Sync document.


The Entra Cloud Sync icon.

Roles & PIM Support

XIA Configuration supports the ability to document detailed information about your Microsoft Entra ID Roles and Privileged Identity Management (PIM) configuration, providing full visibility of administrative access, privileged assignments, and just‑in‑time elevation controls across your tenant.

  • Discovery of all Microsoft Entra directory roles, including role names, descriptions, and assignment scope.
  • Identify whether roles are marked as Privileged.
  • Full visibility of allowed and excluded permissions and role assignments.
  • Full visibility of PIM configuration, including approval requirements, activation durations, and MFA enforcement.
  • Audit‑ready documentation of privileged access, including PIM role activation and PIM configuration settings.


View sample Roles & PIM document.


The Entra role icon.

Entra ID Tenant Configuration Reporting and Compliance Analysis

XIA Configuration includes a comprehensive reporting engine with reports specifically designed for Microsoft Entra ID and Conditional Access.

Unlike generic reporting tools, XIA Configuration understands Microsoft Entra ID and Conditional Access configuration structure and exposes the information system administrators need - from tenant‑level configuration and security settings to Conditional Access policies, roles, and permissions.

Whether you're managing a single Entra ID tenant or a large multi-tenant estate, you can generate clear, actionable reports that highlight configuration, security posture, and changes across your environments.

View more information.

An icon that represents a Entra ID reporting.

Entra ID Automated Documentation Tool

Using XIA Configuration's powerful IT infrastructure documentation features you can create professional branded documentation without friction.

This documentation is essential for business continuity, disaster recovery and technical handovers.

View sample document.

Cover page of Entra ID Documentation.

Azure Tenant Support

XIA Configuration Server also provides comprehensive documentation for your Microsoft Azure tenants, giving you full visibility of your cloud resources and configuration.

  • Tenant information including hierarchy, locations, subscriptions, and contacts.
  • Resource groups and all associated Azure resources such as virtual machines, disks, networks, and storage accounts.
  • SQL Servers, SQL Databases, and SQL Elastic Pools with detailed configuration.
  • Role assignments across subscriptions, resource groups, and individual resources.
  • Policy assignments, compliance status, and Azure Security Benchmark results.
  • Alerts, metrics, and monitoring configuration.


View more information.


The Microsoft Azure icon.

Compare Entra ID Configurations

Using XIA Configuration's powerful configuration comparison feature you can:

  • Detect unauthorized modifications or configuration drift for your tenants.
  • Ensure consistent configuration by comparing settings across development, test, and production tenants.
  • Compare individual Conditional Access Policies for differences.
  • Compare individual applications for differences.
  • Compare Cloud Sync configurations for differences.
Screenshot of an Entra Directory configuration comparison component selection.
XIA Configuration allows you to select what components to compare.
Screenshot of an Entra Directory configuration comparison.
XIA Configuration automatically detects differences between Entra Directory configurations including the configuration of Conditional Access and individual Conditional Access Policies.

Microsoft Entra ID documentation FAQ

Here are answers to the most common questions about documenting Microsoft Entra ID with XIA Configuration.

Does XIA Configuration need an agent installed to document Microsoft Entra ID?

No. XIA Configuration is completely agentless. All Microsoft Entra ID information is retrieved securely via Microsoft Graph, with no software installed in your tenant.

Why is Microsoft Entra ID documentation important?

Microsoft Entra ID is the identity foundation for your cloud and hybrid environment. Documenting your directory provides clear visibility of users, groups, roles, applications, devices, and security controls, helping IT teams manage change, troubleshoot issues, and demonstrate compliance.

What Microsoft Entra ID information does XIA Configuration document?

XIA Configuration documents users, groups, roles, administrative units, enterprise applications, service principals, devices, directory settings, Conditional Access policies, authentication strengths, and Privileged Identity Management (PIM) assignments.

Can XIA Configuration document large Microsoft Entra ID tenants?

Yes. XIA Configuration supports documenting large and complex Microsoft Entra ID tenants, providing a unified, structured view across thousands of users, groups, roles, and applications.

Can XIA Configuration compare Microsoft Entra ID configurations?

Yes. Using the Data Comparer, you can compare documentation between scans to identify added, removed, or modified users, groups, roles, applications, Conditional Access policies, and other directory objects. This helps detect configuration drift and supports audit and change-management processes.

What output formats are supported for Microsoft Entra ID documentation?

Documentation can be exported to PDF and Microsoft Word (DOCX) formats, making it easy to share, review, archive, and include in audit packs or compliance reports.