app health recommendations

Author: rwike77

articles/active-directory/workload-identities/TOC.yml

@@ -21,6 +21,8 @@
         href: ../conditional-access/workload-identity.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
       - name: Conditional access evaluation for workload identities
         href: ../conditional-access/concept-continuous-access-evaluation-workload.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+      - name: Checking app health with Azure AD recommendations
+        href: ../reports-monitoring/howto-use-recommendations.md
 - name: How-to guides
   items:
   - name: Connect workloads without managing secrets
@@ -37,6 +39,14 @@
     href: ../privileged-identity-management/pim-create-azure-ad-roles-and-resource-roles-review.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
   - name: Manage custom security attributes for an app
     href: ../manage-apps/custom-security-attributes-apps.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+  - name: Check app health status and mitigate risk
+    items:
+      - name: Remove unused applications
+        href: ../reports-monitoring/recommendation-remove-unused-apps.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+      - name: Remove unused credentials from apps
+        href: ../reports-monitoring/recommendation-remove-unused-credential-from-apps.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+      - name: Renew expiring application credentials
+        href: ../reports-monitoring/recommendation-renew-expiring-application-credential.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
   - name: Reference
     items:
     - name: Federated identity credentials considerations and limitations

articles/active-directory/workload-identities/breadcrumb/toc.yml

@@ -22,4 +22,7 @@
     topicHref: /azure/active-directory/index
   - name: Active Directory
     tocHref: /azure/active-directory/manage-apps/
+    topicHref: /azure/active-directory/index
+  - name: Active Directory
+    tocHref: /azure/active-directory/reports-monitoring/
     topicHref: /azure/active-directory/index

articles/active-directory/workload-identities/index.yml

@@ -27,6 +27,17 @@ landingContent:
           - text: Frequently asked questions about license plans
             url: workload-identities-faqs.md
   # Card
+  - title: Check app health status and mitigate risk
+    linkLists:
+      - linkListType: how-to-guide
+        links:
+        - text: Remove unused applications
+          url: ../reports-monitoring/recommendation-remove-unused-apps.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+        - text: Remove unused credentials from apps
+          url: ../reports-monitoring/recommendation-remove-unused-credential-from-apps.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+        - text: Renew expiring application credentials
+          url: ../reports-monitoring/recommendation-renew-expiring-application-credential.md?toc=/azure/active-directory/workload-identities/toc.json&bc=/azure/active-directory/workload-identities/breadcrumb/toc.json
+  # Card
   - title: Secure risky workload identities
     linkLists:
       - linkListType: overview