Office 365 (Azure Active Directory) connects to Secfix using OAuth, allowing Secfix to seamlessly import employees into Secfix.
Prerequisites
A minimum Microsoft 365 Business Standard + Azure AD Premium P1 subscription is required
Global Administrator role in Microsoft Office365. Check out what is a Global Administrator here.
💡 Global Reader role in Microsoft Graph API as of 2024:
Cannot consent to app permissions on behalf of the tenant
Cannot approve admin consent flows during the integration process
Doesn't have access to Security and Compliance configuration on Azure/Microsoft services (e.g. audit logs, log ins, etc.)
Therefore, we cannot perform any operations if user with Global Reader tries to connect instead of Global Admin.
Connecting Secfix & Office 365
From the left-hand navigation panel, select Integrations
Search for Office365 and select Connect
You will be redirected to the Microsoft login page. Ensure to login to the account with Global Administrator permissions. Secfix will request read-only permissions to access to the specified resources for your organization.
Once you're ready to connect, select Accept.
Once Accepted, You'll be redirected back to Secfix.
Now it's connected and Secfix will start to automatically fetch your employee list and vendors on a regular basis.
FAQs
What prerequisites are needed to connect Office 365 to Secfix?
You need a minimum Microsoft 365 Business Standard + Azure AD Premium P1 and Super Admin access to your company's Office 365 account.
What data does Secfix read once I connect to Office 365?
Secfix will read employee data such as start date, end date, employee name, MFA status on employee emails, and more. You can check the full list of data read by Secfix by clicking on Connect.
I connected to Office 365 and got logged out of Secfix. Why did this happen?
If you are not a Super Admin but a delegated admin on Office 365, Secfix uses the "is super admin" status from the Office 365 account. If the account is a Super Admin, Admin access is granted to Secfix. If you are not a Super Admin, you will be automatically logged out and assigned employee access to Secfix. Ensure that a Super Admin connects to Secfix to avoid this issue.