Sold by: IPC Global Services
Daily, structured export of Microsoft Entra ID audit, identity, security, and Microsoft 365 usage data into your AWS S3 bucket. Drops into Qlik, Athena, Snowflake, and Databricks.
Overview
onGuard for Entra ID is a managed data-collection service that gives your analytics and security teams structured, queryable access to Microsoft Entra ID and Microsoft 365 audit, identity, security, and usage data, without the operational burden of building and maintaining the Microsoft Graph integration yourself.
Once you subscribe and grant one-time admin consent in your Microsoft Entra tenant, onGuard provisions a small, fully managed stack into YOUR AWS account: a Lambda function on a daily schedule, an S3 bucket you own, and an IAM role scoped to least privilege. Every morning, onGuard pulls 17 distinct datasets from Microsoft Graph (users, groups, sign-ins, directory audits, secure score, risk detections, license assignments, authentication methods, SharePoint sites, Teams / OneDrive / Outlook usage reports, and more) and lands them as structured files in your bucket, partitioned by domain and date.
Why teams pick onGuard:
- Your data, your bucket. No third-party data custody. Your data never transits IPC Global infrastructure.
- Drops into your existing analytics stack. Files are formatted for immediate use in Qlik, Athena, Snowflake, Databricks, and any tool that reads JSON or CSV from S3.
- Audit-ready from day one. Daily snapshots of identity and security posture become the evidence base for SOC 2, ISO 27001, HIPAA, and internal access reviews.
- Per-customer credential isolation. Each customer gets their own credential on the IPC onGuard app: no shared secrets across customers, no cross-tenant blast radius.
- Fast to start. Subscribe with a single click and deploy in under 15 minutes. Free trials are available through a private offer: contact support@ipc-global.com .
Three monthly tiers:
- Data Collection: the full extract catalog, delivered daily to your own AWS account.
- Data Collection + Qlik Apps: adds the prebuilt Qlik Cloud analytics apps and email alerts on collection failures.
- Data Collection + Qlik Apps + Expert Hours: adds up to 10 hours per month of IPC Global expert consulting and support for onGuard and the Qlik apps, scheduled through support@ipc-global.com during business hours; unused hours do not roll over; additional hours available through a private offer.
Built and operated by IPC Global, a Data, Analytics, AI, and Cloud services partner trusted by enterprises worldwide.
Highlights
- Data lands in your AWS S3 bucket: no third-party data custody
- 17 prebuilt collectors covering identity, audit, security, and Microsoft 365 usage
- Direct compatibility with Qlik, Athena, Snowflake, and Databricks
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Data Collection | The full Microsoft Entra ID and Microsoft 365 extract catalog, collected daily and delivered to an S3 bucket in your own AWS account. Narrow which extracts run at any time from the portal's Configuration page. Standard email support during business hours (US Eastern Time). | $299.00 |
Data Collection + Qlik Apps | Everything in Data Collection, plus the prebuilt Qlik Cloud analytics apps on top of the same extract catalog, and email alerts on collection failures. | $999.00 |
Data Collection + Qlik Apps + Expert Hours | Everything in Data Collection + Qlik Apps, plus up to 10 hours per month of IPC Global expert consulting and support for onGuard and the Qlik apps, scheduled through support@ipc-global.com during business hours; unused hours do not roll over; additional hours available through a private offer. Also includes priority support and multi-tenant aggregation for parent and subsidiary organizations. | $2,999.00 |
Dimensions summary
You choose one tier per subscription, billed monthly on your AWS bill. The three tiers build on each other. Data Collection delivers the daily extract catalog to an S3 bucket in your own AWS account, with standard email support. Data Collection + Qlik Apps adds prebuilt analytics apps on the same extracts, plus failure alerts. Data Collection + Qlik Apps + Expert Hours adds up to 10 monthly consulting hours, priority support, and multi-tenant aggregation for parent and subsidiary organizations. Unused hours do not roll over. Each higher tier keeps everything from the tier below it.
Top-of-mind questions for buyers
The daily audit extract captures identity inventory, conditional access policy coverage, app registrations and consent grants, privileged role assignments, inactive or stale accounts, sign-in patterns, and assigned license data. It lands in an S3 bucket in your own AWS account, ready for your queries and retention. The tool reads only and never modifies your tenant.
You get up to 10 consulting and support hours per month, scheduled through the vendor during business hours. Unused hours do not carry over to the next month; they reset each billing period. If you need more than 10 hours in a month, extra hours are available through a private offer.
onGuard delivers audit extracts and, on higher tiers, analytics apps built on those extracts. It does not remediate misconfigurations, manage identities, or enforce policy changes on your tenant. Those actions stay with you, informed by the data delivered. The analyzer reads metadata and definitions only; it never writes to your tenant.
marketplace.ipc-global.com
Helpful?
Vendor refund policy
Refunds are handled per AWS Marketplace standard policy. Contact support@ipc-global.com for support requests.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Standard email support during business hours (US Eastern Time). The Data Collection + Qlik Apps + Expert Hours tier adds up to 10 hours per month of IPC Global expert consulting and support, scheduled through support@ipc-global.com during business hours. Contact support@ipc-global.com .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Intelliguards MDR defends your organization with high confidence using the most advanced technologies, threat intelligence, and expertise. The service provides continuous monitoring, triage, and advanced response.
Combine AuthPoint MFA with dark web credential monitoring and credential access threat detection to protect every login and detect exposed credentials before attackers exploit them.
Cloud-native SASE platform combining ZTNA, SWG, and FWaaS for hybrid workforces. Managed via WatchGuard Cloud with multi-tenant support built for MSPs and SMEs.
WatchGuard Endpoint Security blocks ransomware, zero-day, and fileless attacks with AI-powered EDR, Zero-Trust Application Service, and ThreatSync XDR - all managed from a single cloud console.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.