These labs cover Workload identity in Microsoft Entra ID. Work through them in the order shown. Each one lists its prerequisites, the PowerShell you will run, and how to check the change worked.
New to the topic? Read the lab prerequisites and IAM Foundations first.
About Workload identity labs
How many Workload identity labs are there?
There is 1 Workload identity lab on Identity Bytes Labs, taking about 1.5 hours in total.
Where should I start with Workload identity?
Start with "Audit App Registration Secrets and Certificates in Entra ID". Use Microsoft Graph PowerShell to find expired, long-lived and ownerless app registration secrets in Entra ID, then fix them and set a lifetime policy.
Do I need a production tenant?
No. Every lab is designed for a free, disposable Microsoft Entra test tenant. Never run lab steps against an environment people depend on.