{"product_id":"n8n-workflow-entra-id-secret-expiry-alerts-via-graph-outlook","title":"n8n Workflow: Entra ID Secret Expiry Alerts via Graph \u0026 Outlook","description":"\u003ch3\u003eStay ahead of expiring Entra ID secrets \u0026amp; certificates—automatically\u003c\/h3\u003e\n\u003cp\u003eThis n8n workflow checks Microsoft Entra ID (Azure AD) app registrations and enterprise apps every day for expiring or recently expired client secrets and certificates, then sends an HTML alert via Microsoft Outlook—with optional notifications to each application’s owners.\u003c\/p\u003e\n\n\u003ch3\u003eWhat this workflow does\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003eRuns daily at 07:00\u003c\/strong\u003e using an n8n schedule to ensure consistent coverage.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eScans Entra ID using Microsoft Graph\u003c\/strong\u003e to fetch app registrations and enterprise apps, including \u003cem\u003epassword credentials\u003c\/em\u003e (client secrets) and \u003cem\u003ekey credentials\u003c\/em\u003e (certificates), using pagination to process everything.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eDetects credential risk\u003c\/strong\u003e by flagging secrets\/certificates that \u003cstrong\u003eexpire within a configured threshold\u003c\/strong\u003e or \u003cstrong\u003eexpired within a lookback window\u003c\/strong\u003e.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eHandles rotated credentials\u003c\/strong\u003e by optionally hiding credentials that already have a newer rotated successor.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eEnriches results with owners\u003c\/strong\u003e by looking up each affected app’s owners in Microsoft Graph, and keeps the item even if owner lookup fails.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eGenerates an HTML summary report\u003c\/strong\u003e including credential status, expiry dates, owners, and direct links to the \u003cstrong\u003eEntra admin center\u003c\/strong\u003e.\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eSends alerts via Microsoft Outlook\u003c\/strong\u003e to configured IT\/security recipients and (if enabled) emails each affected owner separately.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eUse cases\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003ePrevent authentication outages by proactively alerting teams before Entra ID secrets\/certificates expire.\u003c\/li\u003e\n  \u003cli\u003eCentralize credential hygiene across many app registrations and enterprise applications.\u003c\/li\u003e\n  \u003cli\u003eSupport SaaS operations teams that manage multiple integrations and want owner-level accountability.\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003ch3\u003eTechnical details\u003c\/h3\u003e\n\u003cul\u003e\n  \u003cli\u003e\n\u003cstrong\u003eMicrosoft Graph access\u003c\/strong\u003e using an n8n Microsoft Entra Service Principal credential.\u003c\/li\u003e\n  \u003cli\u003eRequires Graph permissions: \u003cstrong\u003eApplication.Read.All\u003c\/strong\u003e, \u003cstrong\u003eUser.Read.All\u003c\/strong\u003e, and \u003cstrong\u003eMail.Send\u003c\/strong\u003e (with admin consent).\u003c\/li\u003e\n  \u003cli\u003e\n\u003cstrong\u003eWorkflow logic\u003c\/strong\u003e uses n8n nodes such as \u003cstrong\u003eif\u003c\/strong\u003e, \u003cstrong\u003eset\u003c\/strong\u003e, \u003cstrong\u003ecode\u003c\/strong\u003e, and \u003cstrong\u003emerge\u003c\/strong\u003e (plus supporting nodes like sticky notes and \u003cstrong\u003eHTTP Request\u003c\/strong\u003e for Graph calls).\u003c\/li\u003e\n\u003c\/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003ePerfect for n8n automation engineers and SaaS operators\u003c\/strong\u003e who need reliable, Graph-powered Entra ID secret expiry monitoring with actionable Outlook email notifications.\u003c\/p\u003e","brand":"N8N Commerce","offers":[{"title":"Default Title","offer_id":46123116757171,"sku":"N8N-20131","price":42.99,"currency_code":"GBP","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0749\/6279\/6723\/files\/M9shipHFl1AUhiYDVJ7hH_OBGTrB28.png?v=1790672643","url":"https:\/\/buyflowscripts.com\/products\/n8n-workflow-entra-id-secret-expiry-alerts-via-graph-outlook","provider":"N8N Commerce","version":"1.0","type":"link"}