Microsoft Entra ID: Configuring the Interconnected Apps Integration

This article explains how to configure the Interconnected Apps integration for Microsoft Entra ID.

Overview

Interconnected Apps provides you with visibility into third-party plugins connected to sanctioned SaaS applications. To provide Cato with visibility of data within an app, you need to set up an integration with the required application. For more information, see Viewing and Analyzing Interconnected Apps.

To configure the Interconnected Apps integration, you need to:

Create a MS Tenant integration as the parent connector
Create the API connector for interconnected Apps

A CASB license is required for Interconnected Apps. For more about purchasing a CASB license, please contact your Cato representative.

Configuring the Microsoft Entra ID Integration

To configure the integrations, create an API app.

Prerequisites

Microsoft 365 E3 License

Step 1: Create the MS Tenant Integration

First, configure the MS Tenant integration as the parent connector. This connector can be used for all Microsoft integrations. If you have already created the parent connector, go to step 2.

To create the MS Tenant integration:

From the navigation menu, select Resources > Integrations and click the Integrated Apps tab.
Click New. The New Connector panel opens.
In the New Connector panel, select the MS Tenant (Configure a new MS Tenant) app.
Enter the Connector Name.
Click Authorize and Save.

A new browser tab opens to the Microsoft 365 app.
In the new browser tab, authenticate to the Microsoft 365 app:
1. Select the Microsoft account for the Microsoft 365 app.
  
  Otherwise, there may be a Microsoft authentication error.
2. Enter the password for the app and approve it.
3. Accept the permissions to let Cato access the Microsoft 365 app.
4. The screen shows that you have successfully applied the permissions for the app.
  
  You can close the browser tab and return to the Cato Management Application.
The Microsoft 365 SaaS application is added to the Integrated Apps tab.

Step 2: Create the API Connector for Integrated Apps

After you have set up the parent connector, add the details of the Interconnected Apps integration in the CMA.

To create the API connector in the CMA:

From the navigation menu, click Resources > Integrations.
Click the Configured Integrations tab.
Click New.

The New Integration panel opens.
Select the SaaS Application you want to add.
Choose 3rd Party Apps.
Select the Microsoft Primary Tenant that was created in Step 1.
(Optional) Add a description.
Click Save.

The CMA connects to the vendor
Click Authorize.

A Microsoft permissions screen will appear.
Review the requested permissions and click Accept.
The app is visible on the Integrated Apps table with a Connected status.

After connecting your APIs, you can track the interconnected apps on the Plugins page. Data may take a few minutes to appear.