Microsoft Security adapter

Microsoft Security adapter for salto.io

Supports Microsoft Entra ID service & Microsoft Intune service, using the Microsoft Graph API.

Authentication is done using OAuth2.0. For more information see specific-cli-options.md

Configure your account for OAuth authentication

1. Register an app in your Entra Admin Center by following this guide. Under the Redirect URI section please select 'Web' and set the redirect URI to http://localhost:PORT, where PORT is a port you will use to authenticate.
2. Add a client secret to your app by following this guide.
3. Assign the following roles to the user you will use to authenticate. Without these roles, you will still be able to authenticate, but you will not be able to access/modify some of the data.
   • Global Administrator
   • Attribute Definition Administrator.
   • One of the following roles: Conditional Access Administrator, Security Administrator, Security Reader.
   • One of the following roles: Global Reader, Authentication Administrator, Privileged Authentication Administrator.
   • Authentication Policy Administrator.

For the authentication you will need the Tenant ID, Client ID and Client Secret, which are all available in the Overview section of the app you registered in the Entra Admin Center.