Skip to main content

Microsoft Azure Sentinel authentication

Prerequisites​

This connector supports OAuth 2.0 Client credentials authentication.

To create a connection, you need the following credentials:

  • Client ID - The client ID of the registered application in AAD. You can find it in the Overview section of your Microsoft Azure application registration.
  • Client secret - The client secret of the registered application in AAD. You can create a new client secret in the Certificates & secrets section of your Microsoft Azure application registration.
  • Workspace name - The name of your Azure Sentinel workspace. You can find it in the Azure portal under Azure Sentinel > Settings > Workspaces.
  • Resource group name - The name of the resource group that contains your Azure Sentinel workspace. You can find it in the Azure portal under Azure Sentinel > Settings > Workspaces.
  • Subscription ID - The subscription ID associated with your Azure Sentinel workspace. You can find it in the Azure portal under Azure Sentinel > Settings > Workspaces.
  • Tenant ID - The tenant ID of your Azure Active Directory. You can find it in the Azure portal under Azure Active Directory > Overview.

Add the Microsoft Azure Sentinel connection​

To create a connection to your Microsoft Azure Sentinel instance, you need to perform the following steps:

  1. Select Orchestrator from the product launcher.
  2. Select a folder, and then navigate to the Connections tab.
  3. Select Add connection.
  4. To open the connection creation page, select the connector from the list. You can use the search bar to find the connector.
  5. Enter the required information and select Connect.