Skip to main content
You need permission to register applications in Microsoft Entra ID, and a Global Administrator or Privileged Role Administrator must grant admin consent for the Microsoft Graph application permissions.

​
Registering an application

Register an application in Microsoft Entra ID so StackOne can call the Microsoft Graph security API without a signed-in user.

1

Sign in to Microsoft Entra

Sign in to your Microsoft Entra account.

  • Navigate to Entra ID > App registrations.
  • Click New registration.
App registrations page with the New registration button highlighted
2

Register the application

Complete the Register an application form.

  • Name: StackOne Integration
  • Under Supported account types, keep Single tenant only.
  • Leave Redirect URI (optional) empty. Client credentials don’t use a redirect.
  • Click Register.
Register an application form with the Name, Supported account types and Register button highlighted
3

Copy the client and tenant IDs

On the app’s Overview page, copy the Application (client) ID and the Directory (tenant) ID.

  • Paste the Application (client) ID into the Client ID field in StackOne Hub.
  • Paste the Directory (tenant) ID into the Tenant ID field in StackOne Hub.
  • Format: both are GUIDs such as 00000000-0000-0000-0000-000000000000
App Overview page with the Application (client) ID and Directory (tenant) ID fields highlighted and their values blurred

​
Creating a client secret

The client secret is the password StackOne uses to request access tokens for the app.

1

Open certificates and secrets

In the app’s left menu, click Certificates & secrets.

  • Open the Client secrets tab.
  • Click New client secret.
Certificates & secrets page with the Client secrets tab and New client secret button highlighted
2

Add the client secret

In the Add a client secret panel, enter a Description such as StackOne Integration.

  • Choose an Expires period. You will need to create a new secret before it expires.
  • Click Add.
Add a client secret panel with the Description, Expires and Add controls highlighted
3

Copy the secret value

In the Value column, click the copy icon to copy the secret, and store it securely for use later.

  • The secret Value is only displayed once and cannot be retrieved later. Copy the Value, not the Secret ID.
  • Paste it into the Client Secret field in StackOne Hub.
Client secrets list with the new secret's value blurred and its copy icon highlighted

​
Configuring API permissions

Grant the Microsoft Graph application permissions that the connector’s actions use.

1

Open API permissions

In the app’s left menu, click API permissions, then click Add a permission.

API permissions page with the API permissions menu item and Add a permission button highlighted
2

Choose application permissions

In the Request API permissions panel, click Microsoft Graph, then click Application permissions.

Permission type selection with Application permissions highlighted
3

Select the permissions

Enables actions: Create Alert Comment, Create Audit Log Query, Create Email Threat Submission, Create Incident Comment, Get Alert, Get Analyzed Email, Get Audit Log Query, Get Email Threat Submission, Get Incident, Get Threat Assessment Request, List Alerts, List Analyzed Emails, List Audit Log Queries, List Audit Log Records, List Email Threat Submissions, List Incidents, List Threat Assessment Requests, Remediate Analyzed Emails, Review Email Threat Submission, Run Hunting Query, Update Alert, Update Incident

Use Search permissions to find and check each permission your integration needs, then click Add permissions.

Application permission search with a selected permission and the Add permissions button highlighted
4

Grant admin consent

On the API permissions page, click Grant admin consent for your organization, then click Yes to confirm.

  • Every permission’s Status should show Granted for your organization.
  • Application permissions only take effect after admin consent is granted.
Configured permissions with every Status showing Granted for the organization

​
Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • Tenant ID
  • Client ID
  • Client Secret
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account on your Accounts page.