Niuco for Microsoft Entra ID users

Using Microsoft Entra ID? Great.
Niuco audits what’s inside and governs what’s outside.

Entra ID handles IAM. Niuco audits what goes through it and governs what doesn’t: the apps with no provisioning, the payroll integration, and the cost of every license.

See Niuco with my Entra ID

No need to replace Entra ID · Works with Google Workspace too

Where Entra ID is strong

For whatever lives in the Microsoft ecosystem, it does the job well

Reviews

Groups, Teams and integrated apps

Recurring reviews of groups, connected applications and roles, across multiple stages.

Access packages

Groups, Teams and SharePoint

Access by package, with incompatibility rules between packages.

Privileges

PIM for roles and groups

Privileged access with time-bound activation.

Cloud HR

Workday and SuccessFactors

Native inbound provisioning from those HR systems.

Where Niuco comes in

Four gaps that show up day to day

Where Entra ID Governance needs a complement as the company grows in apps and contracts.

Apps with no provisioning

Revocation becomes a manual task

Without federation or configured provisioning (SCIM, SQL, LDAP, REST and others), the review result does not reach the app on its own.

Brazilian payroll

An integration to build

Outside HR systems with native integration, such as Workday and SuccessFactors, the inbound flow goes through an API, and the customer, a partner or the HR vendor builds the integration.

Shadow IT

A different product, a different license

App discovery lives in Defender for Cloud Apps, with a basic tier in Entra ID P1, EMS E3 and Microsoft 365 E3.

SaaS cost

An unused license stays on the invoice

Entra ID Governance takes care of who has access and with which permission. Paid licenses that nobody uses, and third-party SaaS contracts, are left to another tool.

When to use each one

Entra ID alone, or Entra ID + Niuco?

Your scenarioEntra ID Governance aloneEntra ID + Niuco
Almost every app has SSO and SCIMCovers it wellAdds SaaS cost and Shadow IT
Many apps without SCIM or with local accountsManual revocation in those appsNiuco acts on the app or opens the checklist for the owner
Brazilian payrollAPI integration, built by the customer, a partner or the HR vendorReady-made connectors for Brazilian payroll systems
Audit asks for evidence from every systemRecords what goes through Entra IDRecord of actions in Entra ID and in the apps connected to Niuco
Finance wants to see idle licenses and contractsOutside the product’s focus, which is accessSpend, waste and renewal per software
How they work together

Entra ID handles IAM. Niuco audits, governs and orchestrates.

Niuco does not replace SSO or the directory: it connects to Entra ID (or to Google Workspace), reads users, groups and licenses, and runs actions through their APIs. Brazilian payroll triggers the lifecycle, and the apps outside Entra ID join the same access review. See Niuco identity governance.

Information about Microsoft Entra was taken from Microsoft public documentation in September 2026. Microsoft, Microsoft Entra, Defender for Cloud Apps, Teams, SharePoint, Workday, SAP SuccessFactors, Google Workspace and other names cited are trademarks of their respective owners. Niuco is not affiliated with, partnered with or endorsed by them; the reference is descriptive only.

Frequently asked questions about Entra ID Governance and Niuco

If your question is not here, talk to a specialist — the conversation takes 30 minutes.

It is Microsoft’s set of identity governance capabilities, sold as an add-on for customers who already have Microsoft Entra ID P1 or P2, or included in the Microsoft Entra Suite. It brings access reviews, access packages, lifecycle workflows and privileged access (PIM) to whatever is integrated with Entra ID.

No. Niuco does not do SSO or directory: Entra ID (or Google Workspace) keeps handling IAM, and Niuco audits, governs and orchestrates. It connects through Microsoft Graph and also covers what falls outside Entra ID: apps without automatic provisioning, Brazilian payroll, Shadow IT and the cost of SaaS licenses.

According to Microsoft documentation, revocation only reaches an application automatically when that application is federated or has provisioning configured (SCIM, SQL, LDAP, REST or a custom connector). In the remaining cases, a manual process is needed to apply the review result. Niuco runs the action when there is an integration and, when there is not, generates the checklist for the software owner and records the execution.

Entra ID has native inbound integration with cloud HR systems such as Workday and SAP SuccessFactors. For other HR and payroll systems, Microsoft offers a provisioning API, and the customer, a partner or the HR vendor builds the integration. Niuco already integrates with Brazilian payroll systems and triggers joiner, mover and leaver events from them.

In September 2026, the Microsoft pricing page listed Entra ID Governance at US$ 7 per user per month, billed annually, for Entra ID P1 or P2 customers, and indicated special pricing for P2 and Microsoft 365 E5 customers. The amount may change by contract and region; check with Microsoft or your partner.

Audit Entra ID. Govern what’s outside it.

Talk to a specialist and see Niuco connected to your Microsoft environment.

Talk to a specialist