Azure AD logs

[Mike Riforgiate]

Create the App in Azure

• https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade
• Click “New registration”
• Name it “WitFoo Precinct”
• Select who can use the application (access the API)
• Select “Web” and enter the Redirect URL in WitFoo Precinct at Admin->Settings->Azure AD
• Click “Register”
• Under Certificates & secrets click “New client secret” (give it a description and expiration)
• Under Microsoft Graph Permissions Add the following minimum permissions:
  • Application: AuditLog.Read.All
  • Application: SecurityEvents.Read.All
  • Application: Directory.Read.All
• Save the application

Configure WitFoo Precinct

• Go to Admin->Settings->Integrations->Azure Active Directory
• Paste the Application ID, Secret key and Tenant ID
• Hit Submit
• Click the Authorize with Azure link, review the permissions and accept.
• Within 15 min “Azure” should be listed as a Artifact Source under Report -> Tool Effectiveness

 

[Author]

Posts