Skip to content

Interpres Application - Azure AD

  • Type: Cloud
  • Vendor: Microsoft

This app integrates with Azure Active Directory

Vendor setup

  • Click + New registration

  • Enter "Interpres" for the app name. Leave the other defaults (Single-tenant, no Redirect URI). Click "Register".

  • Copy the application (client) ID and the Directory (tenant) ID over to the Interpres integration setup page

Permissions

  • Add the following permissions (as Application):

Microsoft Graph

  • Device.Read.All
  • DeviceManagementConfiguration.Read.All
  • DirectoryRecommendations.Read.All
  • Group.Read.All
  • Policy.Read.All
  • Policy.Read.PermissionGrant
  • RoleManagement.Read.All
  • SecurityAlert.Read.All
  • SecurityIncident.Read.All
  • ThreatAssessment.Read.All
  • ThreatHunting.Read.All
  • User.Read.All
  • Click API permissions then Grant admin consent for YOUR_TENANT

Secret creation

  • Click Certificates & Secrets then New client secret

  • Enter "Interpres" for the description and choose "12 months".

App Configuration

App Parameters:

  • Tenant ID: Tenant ID
  • Client ID: Client ID
  • Client Secret: Client Secret
  • Asset FQDN: Only grab assets with this fully qualified domain name
  • Identity Country: Only grab identities within this comma delimited list of ISO 3166 three letter country code
  • Exclude Identity Fields: Exclude identity fields from the Microsoft Graph users request using a comma delimited list. Available fields are: displayName, userPrincipalName, jobTitle, mobilePhone, country, department, officeLocation, preferredLanguage

App Validation

Check there is connectivity (green light) in the integration created.

Implemented Actions

  • Get Assets: Returns a list of devices from the directory
  • Get Available Telemetry: Returns a list of telemetry available in Azure AD (Static)
  • Get Identities: Returns a list of users from the directory
  • Get Policies: Returns directory and identity policies, including conditional access and authentication policies. Some endpoints require an AAD Premium license
  • Get Recommended Actions: Gets a list of recommendations and their status