# TrueConfig > Desired State Configuration for Microsoft 365 identity and access TrueConfig is a SaaS platform that helps IT administrators and security teams maintain their desired security configuration for Microsoft 365 (M365) environments. It continuously monitors Microsoft Entra ID tenants, detects configuration drift from defined baselines, and can automatically remediate deviations. ## Frequently Asked Questions ### What is TrueConfig? TrueConfig is a Desired State Configuration (DSC) platform for Microsoft 365. It monitors your Entra ID tenant, detects when security configurations drift from your defined baseline, and can automatically fix deviations. Think of it as "Infrastructure as Code" but for Microsoft 365 identity and access management. ### What is Desired State Configuration for Microsoft 365? Desired State Configuration (DSC) for Microsoft 365 means defining what your tenant security settings SHOULD look like, then having software continuously ensure they stay that way. TrueConfig scans your tenant, compares it against your baseline, and alerts you (or auto-fixes) when things change. ### How does TrueConfig compare to Microsoft Secure Score? Microsoft Secure Score gives you a snapshot and recommendations. TrueConfig goes further by: (1) continuously monitoring for configuration drift, (2) alerting when settings change from your baseline, (3) auto-remediating deviations, and (4) providing an audit trail of all changes. ### What Microsoft 365 configurations does TrueConfig monitor? TrueConfig monitors 71 security controls across 9 categories including: Conditional Access policies, Privileged Identity Management (PIM), authentication methods, directory settings, guest access policies, admin role assignments, and more. ### Does TrueConfig support auto-remediation? Yes. TrueConfig can automatically fix certain deviations with built-in safety gates. For example, if someone removes MFA requirements for admins, TrueConfig can automatically restore the policy. Safety checks prevent dangerous changes. ### What are TrueConfig security baselines? TrueConfig offers 3 predefined security baselines from Minimum to Maximum security. Each baseline includes a curated set of controls aligned with industry frameworks like CIS Benchmarks. You can also customize baselines to match your organization's requirements. ### How much does TrueConfig cost? TrueConfig offers a 7-day free trial. Paid plans start at €199/month for Starter (1 tenant), €349/month for Growth (3 tenants), and €599/month for Scale (10 tenants). See https://www.trueconfig.io/pricing for full details. ### Is TrueConfig secure? Yes. TrueConfig uses OAuth 2.0 with Microsoft's consent framework. By default, we request read-only permissions. Write permissions are only needed if you enable auto-remediation. All data is encrypted at rest and in transit and hosted in the EU. We are GDPR compliant, and our SOC 2 Type II audit is in progress (expected Q3 2026). ### Who is TrueConfig for? TrueConfig is built for IT administrators, security teams, and Managed Service Providers (MSPs) who manage Microsoft 365 environments and want to maintain consistent security configurations across their tenants. ## Core Concepts - **Baselines**: Predefined security configurations representing your "desired state" - **Controls**: Individual security checks (e.g., "Limit Global Admins to 4 or fewer") - **Deviations**: When actual tenant configuration differs from baseline - **Auto-remediation**: Automated fixing of deviations with safety checks ## Content Overview - 3 Security Baselines (from Minimum to Advanced) - 71 Security Controls across 9 categories - 21 Blog posts about M365 security and configuration management ## Key Pages ### Product - Homepage: https://www.trueconfig.io/ - Pricing: https://www.trueconfig.io/pricing - Security Baselines: https://www.trueconfig.io/baselines - Security Controls: https://www.trueconfig.io/controls ### Documentation - Getting Started: https://www.trueconfig.io/docs/getting-started/quick-start - Baselines Overview: https://www.trueconfig.io/docs/core-concepts/baselines - Controls Reference: https://www.trueconfig.io/docs/controls/reference - Auto-Remediation: https://www.trueconfig.io/docs/features/auto-remediation ### Resources - Blog: https://www.trueconfig.io/blog - Video Tutorials: https://www.trueconfig.io/docs/videos ### Company - About: https://www.trueconfig.io/about - Privacy Policy: https://www.trueconfig.io/privacy - Terms of Service: https://www.trueconfig.io/terms ## Control Categories - Identity & Authentication: User authentication and identity protection controls - Privileged Access: Administrative role and privilege management - Conditional Access: Access policies and conditional requirements - Workload Identity & Applications: Application registrations and service principals - Guest & External Access: Guest users and external collaboration - Governance & Hygiene: Account lifecycle and hygiene practices - Logging & Visibility: Audit logs and monitoring capabilities - Data Protection: Data loss prevention and information protection - License Management: License utilization and cost optimization ## Baseline Levels - TrueConfig Recommended Secure Baseline: Protects against common attacks without disrupting daily work. Blocks credential theft, legacy vulnerabilities, and unauthorized access. - Enhanced Security Baseline: Adds time-limited admin access and advanced threat detection. Admins activate permissions only when needed, reducing your attack window. - Maximum Security Baseline: Hardware-backed authentication, real-time threat containment, and continuous monitoring. Designed for zero-tolerance security requirements. ## Technical Details - Target Audience: IT administrators, security teams, MSPs - Primary Platform: Microsoft 365 / Microsoft Entra ID - Key Integrations: Microsoft Graph API, Conditional Access, PIM ## API & Authentication TrueConfig integrates with Microsoft 365 via OAuth 2.0 and Microsoft Graph API. Users authenticate with their Microsoft work accounts. ## Sitemap Full sitemap available at: https://www.trueconfig.io/sitemap.xml ## Contact - Support: support@trueconfig.io - Security: security@trueconfig.io - Website: https://www.trueconfig.io --- Last updated: 2026-08-16