I want to integrate O365 with SIEM, I followed the document and device side configuration is done. But I want to understand sign on URL, in document it is given as http://localhost:1234.
What exactly it is?
Device/Server owner Team will provide it?
Kindly hep me to integrate O365 with SIEM: Detailed Server side configuration document will be more appreciated with eg.
Thanks in advance
Santosh B Siddanaikar
You need to create an application in your O365/Azure tenant, then assign permissions for that application to read Management events from the azure API. This requires a o365 global admin to configure the application.
Please find the below link for data source side configuration:
I need to understand Point 5 and Point 10 to 12.
Even Microsoft support team not able to understand these points.
Can any one explain me and share the example document who has already configured 0365.
Thanks and regards,
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center
2821 Mission College Blvd.
Santa Clara, CA 95054 USA
Consumer Support | Enterprise Support | McAfee.com
Legal | Privacy | Copyright © 2019 McAfee, LLC