Skip to content

Latest commit

 

History

History
29 lines (21 loc) · 1.84 KB

microsoft-entra-id.md

File metadata and controls

29 lines (21 loc) · 1.84 KB
title description author ms.topic ms.date ms.service ms.author ms.collection
Microsoft Entra ID connector for Microsoft Sentinel
Learn how to install the connector Microsoft Entra ID to connect your data source to Microsoft Sentinel.
cwatson-cat
how-to
04/26/2024
microsoft-sentinel
cwatson
sentinel-data-connector

Microsoft Entra ID connector for Microsoft Sentinel

Gain insights into Microsoft Entra ID by connecting Audit and Sign-in logs to Microsoft Sentinel to gather insights around Microsoft Entra ID scenarios. You can learn about app usage, conditional access policies, legacy auth relate details using our Sign-in logs. You can get information on your Self Service Password Reset (SSPR) usage, Microsoft Entra ID Management activities like user, group, role, app management using our Audit logs table. For more information, see the Microsoft Sentinel documentation.

This is autogenerated content. For changes, contact the solution provider.

Connector attributes

Connector attribute Description
Log Analytics table(s) SigninLogs
AuditLogs
AADNonInteractiveUserSignInLogs
AADServicePrincipalSignInLogs
AADManagedIdentitySignInLogs
AADProvisioningLogs
ADFSSignInLogs
AADUserRiskEvents
AADRiskyUsers
NetworkAccessTraffic
AADRiskyServicePrincipals
AADServicePrincipalRiskEvents
Data collection rules support Not currently supported
Supported by Microsoft Corporation

Next steps

For more information, go to the related solution in the Azure Marketplace.