| Table of Contents | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
...
Creating Azure Application for Microsoft Partner Center
Step 1a: Login to https://portal.azure.com/ using MFA Enabled Global Administrator Role to get Client ID, Secret ID and set permissions.
Step 1b: In the Microsoft Azure Portal, search for Azure Active Directory and select it.
...
Step 3c: Under API Permissions, Click on Microsoft Graph.
Search permission for the name Organization and select the Organization.Read.All permissions.
Search permission for the name User and select the User.Read permissions.
Once done, click on Update Permissions.
...
Step 3d: Once permissions are set, on the same page, please grant admin access by clicking on the Grant admin consent for Connect Secure and click on the Yes button
...
Under the select platform box select as Web.
Second box give the URL link as https://authccns.mycybercns.com/
Once all the information is entered correctly click on the Register Button.
...
Click on Accept under permissions requested.
...
...
After clicking on Accept, please close the Microsoft login window (If it again pop-ups as login to the account).
After giving the consent, please close the pop-up with the error eg: AADSTS700016 if any and click on the finish button to proceed further.
...
| Info |
|---|
Make sure to have followed below steps for any errors:
|
This completes adding Azure Application for Azure Active Directory.
Integrate in CyberCNS Portal
Refer to this video for the detailed steps documented below.
...
Global Settings → Integrations
Navigate to Global Settings(⚙) > Integrations and choose Azure AD CSP from the integrations listed.
Add Credentials
It will lead to add credentials for your Azure AD CSP. Provide details as requested.
...
Add Azure AD CSP Credentials
Click on + to add Azure AD CSP credentials.
Choose a Name for the credentials for your reference.
By default Azure CSP Authentication Endpoint will be Global Service, it can be changed by dropdown if the Microsoft login mail id is associated with .us or .com (US government/ Global Service)
Provide Tenant ID - This is the Tenant ID from the created applications. (This is same for both the applications created- Single tenant and Multi-Tenant).
Provide Client ID and Client Secret for created Azure application for Microsoft Partner Center (Single Tenant).
Provide Client ID and Client Secret for created Azure application for Azure Active Directory(Multi-Tenant).
Click on Save to save these credentials successfully. This will lead to the Microsoft login page asking for consent.
Once the login is successful, the Azure AD Credentials will be stored successfully.
A user having an MFA EnabledGlobal Administrator role/permissions is required to be used for login.
Using the above method you can add multiple credentials.
Company Mapping
| Info |
|---|
|
...
In Company Mapping, choose the Azure AD Credential of your choice from the dropdown
...
Click on +Add to map the company.
...
One of these two options could be selected
...
If there is a Partner Centre token expiration issue:
The re-authentication option appears if the token expires under Azure AD CSP integration in the mapping section, as shown in the image below.
...
Import Companies from Azure AD
To import multiple companies from Azure AD, choose Import Companies from Azure AD, and click on Next.
Multiple companies can be added to the user interface so the Azure AD data to be synced to the appropriate companies selected.
Click on Finish to import all the selected Azure AD companies.
There is an option to Delete the integration mapping using the Action column. Any company mapping can be deleted if needed.
Map Existing Company to an Azure AD Company
As shown in the below image, to map existing company, select the Existing company and Azure AD company by using a dropdown or with the search bar as per the requirement.
Once the company is selected click on ‘+' to select the company and click on Finish to map all the selected Azure AD companies.
Click on “Please Click HERE to provide consent” to provide consent on behalf of the company.
By clicking here, it will redirect to the Microsoft user login screen. Please use the appropriate global admin account to provide consent to successfully add the company and sync the data into CyberCNS.
There is a copy link to copy and open the consent link in the separate tab.(optional)
After clicking on Accept, please close the Microsoft login window.(If it again pop-ups as login to the account)
There is an option to Delete the integration mapping using the Action column. Any company mapping can be deleted if needed.
...
When Azure AD credentials and Company Mapping are added, the two tabs Azure Active Directory and Microsoft Secure Score will be enabled under the Company view> Company that have the mapping.
...
Please wait for the sync to complete to get the data under Azure Active Directory and Microsoft Secure Score section.
...
Under Azure Active Directory> Sync Now can help you sync the data at any point of time.
...
This completes adding Azure Application for Azure Active Directory.
Integrate in CyberCNS Portal
Refer to this video for the detailed steps documented below.
...
Global Settings → Integrations
Navigate to Global Settings(⚙) > Integrations and choose Azure AD CSP from the integrations listed.
Add Credentials
It will lead to add credentials for your Azure AD CSP. Provide details as requested.
...
Add Azure AD CSP Credentials
Click on + to add Azure AD CSP credentials.
Choose a Name for the credentials for your reference.
By default Azure CSP Authentication Endpoint will be Global Service, it can be changed by dropdown if the Microsoft login mail id is associated with .us or .com (US government/ Global Service)
Provide Tenant ID - This is the Tenant ID from the created applications. (This is same for both the applications created- Single tenant and Multi-Tenant).
Provide Client ID and Client Secret for created Azure application for Microsoft Partner Center (Single Tenant).
Provide Client ID and Client Secret for created Azure application for Azure Active Directory(Multi-Tenant).
Click on Save to save these credentials successfully. This will lead to the Microsoft login page asking for consent.
Once the login is successful, the Azure AD Credentials will be stored successfully.
A user having an MFA EnabledGlobal Administrator role/permissions is required to be used for login.
Using the above method you can add multiple credentials.
Company Mapping
| Info |
|---|
|
In Company Mapping, choose the Azure AD Credential of your choice from the dropdown
Click on +Add to map the company.
One of these two options could be selected
Import Companies from Azure AD:- To import multiple companies from Azure AD at a time. This will create a new company under CyberCNS for every company imported from Azure AD.
Map Existing Company to an Azure AD company:- To map an existing company into CyberCNS to the Azure AD company.
...
If there is a Partner Centre token expiration issue:
The re-authentication option appears if the token expires under Azure AD CSP integration in the mapping section, as shown in the image below.
...
Import Companies from Azure AD
To import multiple companies from Azure AD, choose Import Companies from Azure AD, and click on Next.
Multiple companies can be added to the user interface so the Azure AD data to be synced to the appropriate companies selected.
Click on Finish to import all the selected Azure AD companies.
There is an option to Delete the integration mapping using the Action column. Any company mapping can be deleted if needed.
Map Existing Company to an Azure AD Company
As shown in the below image, to map existing company, select the Existing company and Azure AD company by using a dropdown or with the search bar as per the requirement.
Once the company is selected click on ‘+' to select the company and click on Finish to map all the selected Azure AD companies.
...
Click on “Please Click HERE to provide consent” to provide consent on behalf of the company.
By clicking here, it will redirect to the Microsoft user login screen. Please use the appropriate global admin account to provide consent to successfully add the company and sync the data into CyberCNS.
There is a copy link to copy and open the consent link in the separate tab.(optional)
After clicking on Accept, please close the Microsoft login window.(If it again pop-ups as login to the account)
| Info |
|---|
|
...
There is an option to Delete the integration mapping using the Action column. Any company mapping can be deleted if needed.
...
When Azure AD credentials and Company Mapping are added, the two tabs Azure Active Directory and Microsoft Secure Score will be enabled under the Company view> Company that have the mapping.
Please wait for the sync to complete to get the data under Azure Active Directory and Microsoft Secure Score section.
Under Azure Active Directory> Sync Now can help you sync the data at any point of time.
Once Sync now is selected, the Jobs > Azure Active Directory jobs section will show a job for sync in progress. Once it is completed, the data will be successfully shown under Azure Active Directory and Microsoft Secure Score.
| Info |
|---|
Make sure to have followed below steps for any errors:
|
This completes Azure Active Directory CSP Integration documentation.
...