Daily.Entra.News18 changes were tracked across 2 Microsoft Entra products. The leading updates include Microsoft Entra Connect Health with AD FS risky IP report workbook; Install the Microsoft Entra Connect Health agents in Microsoft Entra ID; Purpose:.
Learn how to install the Microsoft Entra Connect Health agents for Active Directory Federation Services (AD FS) and for sync.
author: omondiatieno
author: omondiatieno
author: omondiatieno
author: omondiatieno
Using dynamic membership groups requires a Microsoft Entra ID P1 license or an Intune for Education license. For more information, see [Manage rules for dynamic membership groups in Microsoft Entra ID](./groups-dynamic-membership.md).
User Administrator
* Make sure that Microsoft Entra Connect Health Agents services are **running** on the machine. For example, Connect Health for AD FS should have two services.
<a name='download-and-install-azure-ad-connect-health-agent'></a>
<a name='7b---endpoints-for-azure-ad-connect-health-agent-for-ad-fssync-and-azure-ad'></a>
Describes the Microsoft Entra Connect Health AD FS risky IP report with Azure Monitor Workbooks.
This is the Microsoft Entra Connect Health page how to monitor your on-premises AD FS infrastructure.
This is the Microsoft Entra Connect Health page that discusses how to monitor Microsoft Entra Connect Sync.
The following documentation is specific to monitoring Active Directory Domain Services with Microsoft Entra Connect Health. The supported versions of AD DS are Windows Server 2016, 2019, 2022, and 2025.
> [!IMPORTANT]
This document describes how to integrate AD FS sign-ins with the Microsoft Entra Connect Health sign-ins report.
- Installing multiple agents provides high availability of sign-in requests.
- Maximum of 50 resource apps per agent identity blueprint (for example, up to 50 entries in the *inheritablePermissions* collection). If you exceed this limit, reduce the number of resource apps to stay within the supported boundary.
