From One Admin to the Community: Open-Sourcing Two Zero-Cost Entra ID Tools

In the world of identity management, we often find ourselves solving the same recurring headaches: deciphering cryptic error codes and chasing a moving target of documentation updates. For the past few months, I have been quietly maintaining two tools built to solve these exact problems for the Microsoft Entra ID ecosystem.

Today, I am thrilled to open-source AADSTS Entra Errors and Entra Tracker. Both are built entirely on a serverless stack, cost €0/month to operate, and are now available under the MIT license.

🔍 AADSTS Entra Errors: The Reference That Actually Helps

Live:entraerrors.aboutcloud.io| GitHub:AADSTS-Entra-Errors

We have all been there—a user hits an AADSTS50126, and you are suddenly deep in a Microsoft Learn rabbit hole trying to determine if the issue lies with the user, your configuration, or a transient Microsoft service.

This tool provides a classification engine that goes beyond the standard reference:

• Automatic Intelligence: Scrapes the official Microsoft error code reference every 6 hours.
• Severity & Attribution: Classifies each code by severity and identifies who is responsible for the fix—user, admin, or developer.
• CA Trigger Detection: Automatically flags 23 specific codes related to Conditional Access triggers.
• Instant Search: Powered by Fuse.js, offering full-text search for all 349 error codes by keyword or scenario.

⚙️ Entra Tracker: Monitoring the Moving Target

Live:entratracker.aboutcloud.io| GitHub:Entra-Tracker

Microsoft announces Entra ID updates across a fragmented landscape: "What's New" pages, Tech Community blogs, and disparate documentation for External ID and B2C. Entra Tracker consolidates these into a single, actionable feed.

Every four hours, the engine parses four distinct sources to provide:

• Consolidated Intelligence: Scrapes the Entra "What's New" page, RSS feeds, and changelogs.
• Impact Mapping: Items are classified by type (Preview, GA, Retirement, Breaking Change) and service category.
• Deadlines & Countdowns: When a retirement deadline is detected, the tool provides an active countdown to the date.
• Personalization: A tailored profile highlights changes specifically relevant to your environment, such as hybrid identity or legacy authentication.

🤖 The Architecture: Serverless, Zero-Cost, Zero-Ops

Both tools were architected with a "Zero" philosophy: Zero database, zero servers, zero containers, and—most importantly—zero bill.

The pipeline is elegantly simple:

1. Ingestion: Cloudflare Workers (cron triggers) scrape and parse Microsoft sources every 4–6 hours.
2. Storage: Processed data is stored in Cloudflare KV.
3. Frontend: Cloudflare Pages serves a high-performance, dark-themed SPA built with vanilla JS and custom CSS.

These tools are not just proofs of concept; they have been serving live production traffic through aboutcloud.io since early 2026.

🔒 Security-First Open Source

Open-sourcing internal tools requires a rigorous approach to security. Before taking these repositories public, I conducted a comprehensive audit:

• Sanitization: Scrubbed all KV namespace IDs, zone IDs, and personal identifiers.
• Secret Management: Migrated all sensitive seeds and keys to Cloudflare Secrets, ensuring they never appear in the source.
• Active Defense: Integrated Trivy for automated vulnerability scans on every push and daily at midnight.
• Verification: Verified a "zero-secret" state through manual grep audits and automated tools.

Sharing is Caring

These projects were born from my own professional needs within the Entra ecosystem. By open-sourcing them, I hope to save you time and frustration.

The community thrives when we share our work. I encourage you to star the repos, open issues, or submit PRs. If you are building something commercial, I am always open to collaboration—let’s talk.

Happy tracking!

If you're running a similar setup or have questions, reach out in the comments or on LinkedIn.

— Antonio | AboutCloud

arusso@aboutcloud.io

Note: These tools are MIT licensed and free for personal, educational, and open-source use.