Azure Defender for Cloud authentication

Prerequisites

This connector supports OAuth 2.0 Client credentials authentication.

To create a connection, you need the following credentials:

• Tenant ID - The tenant ID of your Azure Active Directory. You can find it in the Azure portal under Azure Active Directory > Overview.* Client ID - The client ID of the registered application in AAD. You can find it in the Overview section of your Microsoft Azure application registration.
• Storage Account Name - The name of your Azure Storage account. You can find it in the Azure portal under Storage accounts > [Your storage account] > Overview.
• Resource Group Name - The name of the resource group where your Azure Storage account is located. You can find it in the Azure portal under Storage accounts > [Your storage account] > Overview.
• Client ID - The client ID of the registered application in AAD. You can find it in the Overview section of your Microsoft Azure application registration.
• Subscription ID - The ID of your Azure subscription. You can find it in the Azure portal under Subscriptions > [Your subscription] > Overview.
• Client secret - The client secret of the registered application in AAD. You can create a new client secret in the Certificates & secrets section of your Microsoft Azure application registration.

You can create either a Public or Private connection to your Microsoft Defender for Cloud instance. For a Private connection, you must also provide the Base URL and Token URL of your Microsoft Defender for Cloud instance. These will be used instead of the default public endpoints to route traffic through your own infrastructure. You can find these URLs in the Azure portal under Microsoft Defender for Cloud > Settings > Workspaces > [Your workspace] > Essentials.

Add the Azure Defender for Cloud connection

To create a connection to your Azure Defender for Cloud instance, you need to perform the following steps:

1. Select Integration Service from the left rail.
2. From the Connectors list, select Azure Defender for Cloud. You can also use the search bar to find the connector.
3. Select Connect to Azure Defender for Cloud.
4. Select the connection type (Public or Private), enter the required information, and select Connect.