Credentials: Microsoft Defender for Cloud

With your Leen API Key and your Customer’s Org ID, make a API request to create a new Microsoft Defender for Connection. More information can be found on the API Reference page.

    {
      "vendor": "MS_DEFENDER_CLOUD"
    }

  {
      "id": "c54de187-df62-4e95-b10f-0ab53b095d9d",
      "vendor": "MS_DEFENDER_CLOUD",
      "is_active": false,
      "refresh_interval_secs": 14400,
      "timeout_secs": 1800,
      "organization_id": "fbd8b095-3c39-4137-9478-c32308444202",
      "oauth2_authorize_url": "https://login.microsoftonline.com/common/oauth2/v2.0/authorize?.....",
      "identifier": null
  }

Open the oauth2_authorize_url from the previous step in a new tab. This will prompt the admin user to authorize Leen’s Microsoft Defender for Cloud app to access their Microsoft Defender resources. Once the user has authorized the app, they will be redirected to Leen on a successful authorization.

Now that the user has authorized the app, you can pull data from Microsoft Defender for Cloud using the connection_id from the first step. More information can be found on the API Reference page.