Blue Team

CRH03 From Chaos to Control: Mastering the Joiner-Mover-Leaver Lifecycle with Entra ID

11/19/2026

9:30am - 10:45am

Level: Advanced

Markus Lintuala

Public Cloud and Security Hero

Identities are the new security perimeter, yet many organizations still struggle with the basics: getting people in, moving them between roles, and ensuring they don't keep access when they leave. Are your admins still "copying permissions from Mike or Fanny"? Is your offboarding process a manual checklist that takes weeks to complete?

In this demo-heavy session, we move past manual tasks and "identity debt" to embrace automated Microsoft Entra ID Governance. We will dive deep into Lifecycle Workflows to show you how to provision, transition, and terminate identities like a pro.

Key Takeaways:

  • Automation in Action: How to set up Entra ID Governance to handle Joiner, Mover, and Leaver (JML) processes automatically.
  • The Reality Check: An honest look at the benefits and the "gotchas" (caveats) of Microsoft’s governance tools.
  • Organizational Readiness: What your business needs to have in place (data-wise and process-wise) before flipping the switch on automation.
  • Zero Trust Offboarding: How to ensure a "Leaver" actually loses access across the entire hybrid estate.

By joining this session, you will learn how to automate the entire identity lifecycle properly, moving from a "copy-paste" mentality to a governed, scalable architecture. This session is packed with live demos where we will build a fully working environment from scratch. You will leave with your hands full of innovative thoughts and a clear roadmap on how to make your own organization’s or your customer’s identity management more secure and efficient than ever before.

You will learn;

  • Automation in Action: How to set up Entra ID Governance to handle Joiner, Mover, and Leaver (JML) processes automatically.
  • The Reality Check: An honest look at the benefits and the "gotchas" (caveats) of Microsoft’s governance tools.
  • Zero Trust Offboarding: How to ensure a "Leaver" actually loses access across the entire hybrid estate