Background
This will walk you through registering an Azure application that can be used by the Microsoft Office 365, Teams and OneDrive connectors in eDiscovery 7.1.1 SP4 and newer.
Prerequisites
- A working installation of eDiscovery 7.1.1 SP4 or newer, or a working installation of AccessData Enterprise 7.4.2 or newer
- O365 Global Admin Credentials
OR - O365 Global Admin from your organization to assist you
Procedure
Configuring Discovery to collect from Microsoft Applications is a two-step process.
First you must register the connector (Office 365 Teams, OneDrive etc.) as an application in the Microsoft Azure Portal. (Each connector must be registered uniquely inside the Azure Portal.)
Secondly, you must configure the appropriate eDiscovery application connector, inside of eDiscovery.
-
-
- Navigate to https://portal.azure.com
- Login to the Azure Portal with Global Admin credentials:
- Enter the Global Admin Password:
- You will be on the Azure Portal Welcome page:
- Click on App Registrations:
- If you do not see App Registrations, please Type "App Registration" in the "Search Resources..." Bar at the Top, and Select App Registrations:
- In the App Registrations Page, click New Registration
- Do the following at the App Registration page:
- Choose an Application Name (This can be changed later, if desired).
- Select the Accounts in any organizational directory (Any Azure AD directory - Multitenant) Radio Button
- Enter a Redirect URL in the format https://<eDiscoveryWebServerURL>/accessdata, as shown in the below examples, making sure to use your eDiscovery web server's correct base URL. Copy the Redirect URL for future use.
- For e-Discovery 7.4.1, AD Enterprise 7.4.2 and later, when using the Graph API you need to use the following format when specifying the redirect URL. Copy this URL for future use when configuring the connectors on the product.
- Exchange/Office365
- Format https://<eDiscovery or Enterprise WebServerURL>/api/GraphApiAccessDataAdmin
- eg. https://localhost/api/GraphApiAccessDataAdmin
- MS Teams
- Format https://https://<eDiscovery or Enterprise WebServerURL>/api/MicrosoftTeamsAccessData
- eg. https://localhost/api/MicrosoftTeamsAccessData
- One Drive
- Format https://https://<eDiscovery or Enterprise WebServerURL>/api/OneDriveAccessData
- eg. https://localhost/api/OneDriveAccessData
- Exchange/Office365
- Click Register
- You will be redirected to the Application Page. Copy the Application (client) ID for future use.
- From the left hand side, select Certificates & Secrets
- From the lower half of the page, click the New Client Secret button:
- Enter the following:
- A description of the Application that will be associated with this application secret, for example:
- eDiscovery Office365 Connector
- eDiscovery Teams Connector
- eDiscovery OneDrive Connector
- Provide an Expiration Date for this Secret. You may choose between the following three options:
- 1 Year
- 2 Years
- Never
- Please note, AccessData does not provide a recommendation on the life of the secret. This is a security consideration that is dependent on each organizations security posture and internal requirements.
- A description of the Application that will be associated with this application secret, for example:
- Click the Add button.
- Copy the generated secret for future use.
- From the left hand side, select Manifest
- Highlight and copy the entire JSON definition in the Manifest Editor, paste it in the box below, and click Submit. This will insert the necessary permissions into the manifest JSON in order to work with the connectors in eDiscovery.
- Highlight and copy the entire JSON definition from the box below, paste it into the Manifest Editor (replacing all existing contents) and click Save in the upper left.
- From the left hand side, select API permissions
- Click the Grant consent button, and wait for all rows under the Status column to report that consent has been granted.
-
You have successfully registered your Application in the Microsoft Azure Portal.
Please follow the appropriate link below for the eDiscovery Data Source(s) you wish to configure.
Configure Microsoft Teams Data Source
Collecting From OneDrive Using A Single Connector (EDiscovery 6.3+, Azure Portal)
Comments