Send Entra ID app credential expiry alerts via Microsoft Graph and Outlook

by Dominik · 5 views · created 2026-09-29 · DevOps

What this workflow does

This workflow has 13 nodes and runs on a schedule (every day at 07:00). Along the way it connects Microsoft Outlook. It also calls graph.microsoft.com over HTTP.

How it runs

Trigger: On a schedule (every day at 07:00).

1. Set Notification Configurations (Edit Fields (Set)): sets 7 fields: thresholdDays, expiredLookbackDays, hideRotated…
2. Fetch App Registrations (HTTP Request): calls graph.microsoft.com
3. Fetch Enterprise Apps (HTTP Request): calls graph.microsoft.com
4. Merge: merges the data from its input branches
5. Filter Expiring Credentials (Code): runs custom JavaScript code
6. Fetch App Owners (HTTP Request): calls an HTTP API
7. Add App Owners (Code): runs custom JavaScript code
8. Build IT Summary Email (Code): runs custom JavaScript code
9. Check Owner Notification (If): checks a condition and branches into true / false
10. Send Summary Email (Microsoft Outlook): uses Microsoft Outlook

…plus 2 more steps. See the full node list below.

Services it uses

Microsoft Outlook

HTTP calls to: graph.microsoft.com

Before you upgrade to n8n 3.0

Nodes used (7)

• Schedule Triggern8n-nodes-base.scheduleTrigger
• Edit Fields (Set)n8n-nodes-base.set
• HTTP Requestn8n-nodes-base.httpRequest
• Mergen8n-nodes-base.merge
• Coden8n-nodes-base.code
• Microsoft Outlookn8n-nodes-base.microsoftOutlook
• Ifn8n-nodes-base.if

From the author

Quick overview This workflow runs daily to scan Microsoft Entra ID (Azure AD) app registrations and enterprise apps via Microsoft Graph for expiring or recently expired client secrets and certificates, then sends an HTML summary alert through Microsoft…

View the original on n8n.io → Check your own copy