ENow | AppGov Blog | Matthew Levy

Matthew Levy

Microsoft Security MVP | Solutions Architect @ Threatscape | Speaker | Blogger. Threatscape empowers organizations to enhance security and compliance through innovative cloud and identity solutions. As a Solutions Architect, I contribute to designing and implementing tailored strategies leveraging Microsoft Entra ID and Microsoft 365 to address complex challenges. With over 8 years in IT consulting and 20+ years of experience in Microsoft enterprise technologies, I am dedicated to advancing secure identity and authentication practices. Recognized as a Microsoft MVP for Security, my passion lies in enabling teams to achieve operational excellence while sharing insights on identity governance and application security through technical blogs and community engagement.

EWS Deprecation: What It Means for Applications Using Exchange Online

September 21, 2026 •Matthew Levy

Exchange Web Services (EWS) has been a foundational API for applications accessing Exchange Online, but Microsoft is retiring it in favor of...

Cartoon showing risks of using the scream test for Entra ID application cleanup

Microsoft Entra ID App Governance: How to Clean Up Apps Without the Chaos

August 22, 2025 •Matthew Levy

Cleaning up applications in Microsoft Entra ID (formerly Azure AD) is a critical part of application governance. Without the right data and process,...

Act Now: Tackling and Surviving Microsoft’s Azure AD Graph API Retirement

January 22, 2025 •Matthew Levy

Overview of Azure AD Graph API Retirement

Microsoft Azure Active Directory Graph API or Azure AD Graph API was originally introduced in 2013 to...

Application Sprawl in Entra ID

December 12, 2024 •Matthew Levy

Application sprawl refers to the proliferation of unmanaged or redundant applications within an organization's identity system. As organizations...

Microsoft Entra Roles & Application Access

July 11, 2024 •Matthew Levy

In cybersecurity, the principle of least privilege is a cornerstone, advocating for the minimal access required for users to perform their functions....

Entra ID Application Consent: What Identity Admins Need to Know - Part Two

April 16, 2024 •Matthew Levy

Inthe first part of this two-part series, I explained the principles that apply to Microsoft Entra ID Application Consent, something most admins...

Entra ID Application Consent: What Identity Admins Need to Know - Part 1

March 6, 2024 •Matthew Levy

If you are an administrator of a Microsoft Entra ID tenant, you may have encountered the concept of app consent. App consent is the process of a user...

Identifying OAuth Apps Without Role Assignments in Your Microsoft Tenant

January 25, 2024 •Matthew Levy

Why it’s important for Identity admins to pinpoint, manage, and secure Entra ID applications without role assignments to ensure proper Application...

AppGov Score Blog