Evaluate Infralign
Before you start
An Infralign account is opened by a person after you ask for the audit. Until that happens the Entra portal work has nothing to connect to.
Somebody at Infralign opens your account: no signup form exists. Every page under Getting started assumes that has already happened, so start here rather than in the Azure portal.
How you get an account
Section titled “How you get an account”- Ask for the free audit at infralign.ai. The form takes a work email address; everything else on it is optional.
- Infralign replies to agree scope and take whatever questions your security team has.
- Infralign enrols your first admin, then sends that person the setup link.
Until step 3 has happened, app.infralign.ai has no account to sign you in to. After it, your admin adds colleagues from the People page without going through Infralign again.
Decide whose address gets enrolled
Section titled “Decide whose address gets enrolled”The wizard authenticates the exact address Infralign enrolled. A different work account, including your own on another tenant, lands on the “this account is not linked to a customer” screen. Name the person and the address when you reply, and make it somebody who will still be there in month three.
Two situations need a word with Infralign before anyone opens the portal:
- Your Azure estate spans more than one Entra tenant.
- Your admin signs in from a different tenant to the one holding the estate, such as a managed service provider or a personal Microsoft account.
Both need cross-tenant connections switched on for your account. The wizard otherwise refuses a credential from a different directory. See connect Azure.
Settle these before the Entra portal
Section titled “Settle these before the Entra portal”| Have ready | Why it blocks you otherwise |
|---|---|
| The subscriptions in scope, and the management group above them | Role assignment is the step you cannot easily redo in bulk |
| The Azure technical owner who will hold the credential | That person does the whole connection, start to finish |
| Whoever can approve the sign-in consent | The one-time consent screen needs a Global Administrator, Privileged Role Administrator, or Cloud Application Administrator. Booking that afterwards stalls the connection |
| A view on whether names, tags, and Activity Log fields in scope carry personal or regulated values | Reviewing it after collection starts is the wrong order |
The connection itself takes about 45 minutes at management group scope. Customer effort breaks that down by person and by phase.
Nothing here costs money
Section titled “Nothing here costs money”The visibility tier and one audit are included in the current campaign offer. Payment starts at a written quote for delivery work, which you accept or do not. The free offer draws the line, including the terms still worth confirming in writing before you connect.
If you would rather look before you talk
Section titled “If you would rather look before you talk”The live demo runs the dashboards, reports and chatbot over a production Azure estate with the identifiers replaced. A work email gets you in, and no Azure connection is involved.
Once your admin has the setup link, the onboarding checklist carries the seven steps in order, with a link to the click-by-click walkthrough for each.