onGuard for Entra ID
Your Entra ID posture, landing in your own account every day.
onGuard delivers daily Microsoft Entra ID audit extracts to the customer’s own AWS account, so identity, access, and configuration data is available for the customer’s own review and retention on their own schedule. Higher tiers add Qlik Cloud apps built on top of those extracts for reporting and trend analysis.
Daily
Entra ID audit extracts
Your AWS account
delivery destination
Tiered
Qlik Cloud apps on higher plans
What it does
Entra ID posture is easy to lose track of: role assignments drift, conditional access policies accumulate exceptions, and app consent grants pile up unreviewed. onGuard runs a daily audit extract of a tenant and lands the result directly in the customer’s own AWS account, so the data is theirs to keep, query, and retain on their own terms rather than trapped in a third party dashboard.
Delivery is entirely AWS Marketplace native: a buyer subscribes, is registered automatically, and is hand off to onGuard’s own onboarding to connect a tenant. Higher tiers add Qlik Cloud apps built on the same daily extracts, so reporting and trend analysis sit on top of data the customer already owns.
At a glance
- Delivery method
- SaaS
- Pricing
- Monthly contract pricing
- Contract
- Standard Contract for AWS Marketplace
Why teams run it
Extracts land in your account
Daily Entra ID audit data is delivered to the customer’s own AWS account rather than held only in a vendor dashboard, so it is available for the customer’s own retention, querying, and compliance evidence.
Set up through AWS Marketplace
Subscribing through AWS Marketplace registers the account automatically and hands the buyer straight to onboarding, with no separate procurement step.
Grows into Qlik Cloud reporting
Higher tiers add Qlik Cloud apps built on the same daily extracts, so trend analysis and dashboards are available without a separate data pipeline.
Four views of your tenant
All four are built on the same daily extract. Qlik Cloud reporting comes with the Data Collection + Qlik Apps tier and above.
Tenant posture overview
Entra ID at a glance
A summary view of what the daily extract covers across the tenant.
- Users, groups, and role assignments
- Conditional access policy coverage
- App registrations and consent grants
- Extract delivery status and history
Daily audit extract
What lands in your account
The raw daily extract delivered to the customer’s own AWS account, ready for their own queries and retention.
- Delivered on a daily schedule
- Stored in the customer’s own account
- Structured for the customer’s own retention and query needs
- Building block for the customer’s own compliance evidence
Access review
Privileged and stale accounts
Role assignments and account activity from the extract, surfaced for the customer’s own access reviews.
- Privileged role assignments
- Inactive or stale accounts
- Sign-in patterns from the extract
- Input to the customer’s own access review process
Qlik Cloud reporting (higher tiers)
Trend analysis on the same data
Qlik Cloud apps built on the daily extracts, for tenants on a tier that includes them.
- Trend analysis across extracts over time
- Dashboards on top of data already in your account
- No separate data pipeline to build
- Available on higher tiers only
What the daily extract covers
The areas of Microsoft Entra ID each extract captures, delivered to your own AWS account.
01
Identity inventory
Users, groups, and role assignments captured in each extract.
02
Conditional access
Policy coverage and configuration across the tenant.
03
App registrations
OAuth app registrations and consent grants.
04
Privileged access
Privileged role assignments, surfaced for review.
05
Account hygiene
Inactive and stale accounts identified from the extract.
06
Sign-in activity
Sign-in patterns captured from available audit data.
07
Licensing
Assigned license data captured for reconciliation against active users.
08
Compliance evidence
Daily extracts retained in the customer’s own account as audit evidence.
Connect once, then extracts land every day
- 1
Subscribe on AWS Marketplace. The subscription registers automatically and the buyer is handed straight to onGuard onboarding.
- 2
Connect your Entra ID tenant. Onboarding claims the account and connects the tenant onGuard audits.
- 3
Extracts start landing daily. Audit data is delivered to the customer’s own AWS account on a daily schedule.
- 4
Add Qlik Cloud reporting on a higher tier. Trend analysis and dashboards build on the same extracts, with no separate pipeline.
Your data stays in your account
Extracts are written to an S3 bucket in your own AWS account. onGuard does not change your Entra ID tenant: no remediation, identity management, or policy changes.
Subscribe on AWS Marketplace
One monthly contract on your AWS bill. Trials and additional expert hours are available through a private offer.
AWS Marketplace subscription
Monthly contract, three tiers from 299 USD per month
Subscribe through AWS Marketplace and choose one tier. The monthly charge appears on your AWS bill; see the pricing section of this page for each tier.
Available on AWS Marketplace
A good fit for
- Organizations that want Entra ID audit data retained in their own AWS account rather than only in a vendor dashboard.
- Teams that already buy software through AWS Marketplace and want identity audit data on the same bill.
- Customers who may want Qlik Cloud reporting on top of their identity data as they grow into a higher tier.
What it does not cover
onGuard delivers audit extracts and, on higher tiers, Qlik Cloud reporting on top of them. It does not remediate Entra ID misconfigurations, manage identities, or enforce policy changes on the customer’s tenant; those remain the customer’s own actions, informed by the data onGuard delivers.
One monthly contract, three tiers to choose from
A monthly contract purchased through AWS Marketplace, for one tier per subscription. The charge appears on the AWS invoice you already receive, and you can choose automatic renewal when you subscribe.
Data Collection
starter · Units299.00 USD per month
The full Microsoft Entra ID and Microsoft 365 extract catalog, collected daily and delivered to an S3 bucket in your own AWS account. Narrow which extracts run at any time from the portal's Configuration page. Standard email support during business hours (US Eastern Time).
One tier per subscription, billed monthly on your AWS bill.
Data Collection + Qlik Apps
professional · Units999.00 USD per month
Everything in Data Collection, plus the prebuilt Qlik Cloud analytics apps on top of the same extract catalog, and email alerts on collection failures.
One tier per subscription, billed monthly on your AWS bill.
Data Collection + Qlik Apps + Expert Hours
enterprise · Units2,999.00 USD per month
Everything in Data Collection + Qlik Apps, plus up to 10 hours per month of IPC Global expert consulting and support for onGuard and the Qlik apps, scheduled through support@ipc-global.com during business hours; unused hours do not roll over; additional hours available through a private offer. Also includes priority support and multi-tenant aggregation for parent and subsidiary organizations.
One tier per subscription, billed monthly on your AWS bill.
Refund policy
Refunds are handled per AWS Marketplace standard policy. Contact support@ipc-global.com for support requests.
Support
- support@ipc-global.com
- 470-407-9100
- Monday to Friday, 8:00am to 6:00pm US Eastern, excluding US holidays.
- Standard response target: 1 business day. Critical issues: 4 business hours.
- The Data Collection + Qlik Apps + Expert Hours tier adds up to 10 hours per month of IPC Global expert consulting and support, scheduled through support@ipc-global.com during business hours.