Entra & Graph

All tools run client-side in your browser unless explicitly marked otherwise. No accounts, no cookies.

Entra Token Decoder

JWT decoder tuned for Entra ID: resolves tenant and app GUIDs to names, translates wids role IDs, explains every claim and shows expiry at a glance.

Microsoft App GUID Lookup

Look up first-party Microsoft application IDs seen in sign-in logs and token claims — appid → name, instantly.

Graph Permission Finder

Describe what you want to do — get the least-privileged Microsoft Graph permission for it, with the PowerShell to go with it.

Entra Sign-in Error Explainer

Paste a full sign-in error message — the AADSTS code is extracted locally and explained, with causes and fixes.

Intune Assignment Visualizer

Paste exported policy JSON and see every assignment as a readable table — includes, excludes, filters and the conflicts that make policies silently apply to no one.