SailPoint IdentityNow integrates with Entra ID (formerly Azure AD) to manage user access to Enterprise Applications, treating them as entitlements for governance, reporting, and access reviews. Users can be assigned directly or through Entra ID groups, with automated provisioning and deprovisioning based on policies. If an app supports SCIM or API-based provisioning, SailPoint can manage user access directly; otherwise, access is controlled via groups. Access requests and approvals are automated where possible, ensuring compliance. Some apps may need manual intervention or custom connectors, but overall, SailPoint simplifies identity governance and security for Enterprise Applications.