availability

Package: Invicti AppSec Enterprise (on-premise, on-demand)

Microsoft Defender for Cloud

Prerequisites

Before starting the integration, ensure the following permissions are in place:

• An App Registration exists in Microsoft Entra ID
• The App Registration is assigned to the relevant subscription with one of the following roles:
  • Security Reader (minimum required)
  • Reader (subscription level)

Role assignment can be done via: Azure Portal > Subscriptions > Access control (IAM) > Add role assignment

Integration steps

Collect and note the following four values from Azure. Once all four are available, the integration can be completed through Invicti AppSec.

Tenant ID

1. Sign in to the Azure Portal.
2. Navigate to Microsoft Entra ID > Overview.
3. Copy the Tenant ID.

Client ID (Application ID)

1. Go to Microsoft Entra ID > App registrations.
2. Create a New registration.
3. Open the application Overview.
4. Copy the Application (Client) ID.

Client secret

1. Open the App Registration.
2. Navigate to Certificates & secrets.
3. Create a New client secret.
4. Copy the secret value immediately (it can't be retrieved later).

Subscription ID

1. In the Azure Portal, go to Subscriptions.
2. Select the relevant subscription.
3. Copy the Subscription ID.

Complete integration

The integration can be completed through Invicti AppSec. Please navigate to Integrations > Scanners > CSPM and click the activate button under Microsoft Defender for Cloud.

Under Advanced Settings, the Team Lead Integrations section is available. These settings define instance creation and management permissions for Team Lead–level users, in addition to Admin-level users.

From the same section, it's also possible to control whether Alerts, Assessments, and Sub-Assessments data are synchronized with Invicti AppSec.

---

Need help?

Invicti Support team is ready to provide you with technical help. Go to Help Center