Configuring Client Credentials for Microsoft Integrations

Step-by-Step Guide

Part 1: Register an Enterprise Application in Azure

1. Login to the Azure portal with an admin account.

2. Navigate to Microsoft Entra ID and go to Manage > App registrations.

3. Click + New registration.

4. Provide a descriptive name (e.g., Cynomi Secure Data Connector) and click Register.

5. On the Application overview page, copy the:

   • Application (client) ID

   • Directory (tenant) ID

6. Go to Certificates & secrets > click + New client secret.

7. Add a description and expiration period > click Add.

8. Copy the client secret value immediately and store it securely — it cannot be retrieved again later.

Part 2: Grant Access to Microsoft Defender for Cloud

Note: This must be done once per subscription by a workspace owner.

1. Login to Azure using a workspace owner account.

2. Go to Subscriptions, then select the subscription with Defender for Cloud enabled.

3. In the subscription menu, select Access control (IAM).

4. Click + Add > Add role assignment.

5. Search and select the Security Reader role.

6. Under Assign access to, choose User, group, or service principal.

7. Click + Select members, find and select the registered application.

8. Set Assignment duration to Permanent > click Next.

9. Review settings > click Review + assign.

10. A confirmation will appear once the assignment is successful.

Part 3: Store the Secret in Cynomi

1. Open the Cynomi platform.

2. Go to your sub account > Scans > Integrations.

3. Select the appropriate integration and enter:

   • Client ID and Tenant ID from Azure.

   • Client Secret (must be securely stored previously).

   • Subscription ID (from Azure Subscriptions screen).

4. Click Save to complete the integration.

Important Notes

• Ensure the client secret is securely stored immediately after creation.

• Each subscription must be manually authorized once.

• Integration is complete only after credentials are stored correctly in Cynomi.