Evaluate Infralign
Before you start
An Infralign account is opened by a person after you ask for the audit. Until that happens the Entra portal work has nothing to connect to.
Somebody at Infralign opens your account: no signup form exists. Every page under Getting started assumes that has already happened, so start here rather than in the Azure portal.
How you get an account
Section titled “How you get an account”- Ask for the free audit at infralign.ai. The form takes a work email address, and everything else on it is optional.
- Infralign replies to agree scope and take whatever questions your security team has.
- Infralign enrols your first admin, then sends that person the setup link.
Until step 3 has happened, app.infralign.ai has no account to sign you in to. After it, your admin adds colleagues from the People page without going through Infralign again.
Decide whose address gets enrolled
Section titled “Decide whose address gets enrolled”The wizard authenticates the exact address Infralign enrolled. A different work account, including your own on another tenant, lands on the “this account is not linked to a customer” screen. Name the person and the address when you reply, and make it somebody who will still be there in month three.
Two situations need a word with Infralign before anyone opens the portal:
- Your Azure estate spans more than one Entra tenant.
- Your admin signs in from a different tenant to the one holding the estate, such as a managed service provider or a personal Microsoft account.
Both need cross-tenant connections switched on for your account. The wizard otherwise refuses a credential from a different directory. See connect Azure.
Settle these before the Entra portal
Section titled “Settle these before the Entra portal”| Have ready | Why it blocks you otherwise |
|---|---|
| The subscriptions in scope, and the management group above them | Role assignment is the step you cannot easily redo in bulk |
| The Azure technical owner who will run the connection | That person does the whole connection, start to finish |
| Whoever can approve the sign-in consent | The one-time consent screen needs a Global Administrator, Privileged Role Administrator, or Cloud Application Administrator. Booking that afterwards stalls the connection |
| A view on whether names, tags, and Activity Log fields in scope carry personal or regulated values | Reviewing it after collection starts is the wrong order |
The connection itself takes about 15 minutes at the keyboard and about 30 minutes elapsed at management group scope; the onboarding checklist owns those numbers. Who you need, and for how long breaks that down by person and by phase.
Nothing here costs money
Section titled “Nothing here costs money”The visibility tier and one audit cost nothing. See the free offer.
The live demo
Section titled “The live demo”The live demo runs the dashboards, reports and chatbot over a real Azure estate with the identifiers replaced. A work email gets you in, and no Azure connection is involved.
Next: the onboarding checklist.