About sub2tenant
sub2tenant began as a small tool I built to automate a repetitive task in my workflow. I often needed to map an Azure Subscription ID to the correct Microsoft Entra tenant, but the only way to do it was a slow, manual two-step process.
Before this tool, my workflow was:
- Use PowerShell to extract the tenant ID using this method described by Lieben
- Look up the tenant ID with the AADInternals OSINT tool
It worked, but it was slow and repetitive. I eventually automated the process as an internal tool at Bsure, and later rebuilt it as a small standalone version that anyone can use without authentication or elevated permissions.
sub2tenant never stores or logs subscription IDs, tenant IDs, domains, or email addresses. Inputs stay in-memory only and are discarded immediately after use.
To keep the service reliable, the backend logs a small amount of anonymous technical usage data, including a random browser-local client identifier, browser type (User-Agent), country (via Cloudflare’s privacy-friendly header), page views, lookup type, lookup outcome, and basic request timing. No IP addresses, cookies, or personal data are collected, and none of the lookup inputs themselves are ever logged.
All analytics are processed anonymously and exist solely to monitor reliability, detect abuse, and understand how the tool is used.
Created and maintained by Olav Helland.