Azure Active Directory Data Connector not in content hub

Question

Hey,

I have set up many sentinel instances but I have recently started building a personal one and the data connector for AAD is no longer there in the solution.

Can anyone assist please?

Answer 1

@Cloudsec

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this!

• Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others", I'll repost your solution in case you'd like to accept the answer.

Issue:

Azure Active Directory Data Connector not in content hub I have set up many sentinel instances, but I have recently started building a personal one and the data connector for AAD is no longer there in the solution.

Solution:

Based off your findings, you were able to see that the Azure AD Connector was removed and later re-added.

Microsoft Sentinel - Azure Active Directory Release Notes

They removed the data connector and have added it back in the newer version!

• If I missed anything please let me know and I'd be happy to add it to my answer, or feel free to comment below with any additional information.

I hope this helps!

---

If you have any other questions, please let me know. Thank you again for your time and patience throughout this issue.

Answer 2

Hi,

Can you check this page as this has some information on the connectors available for the sentienl - https://learn.microsoft.com/en-us/azure/sentinel/connect-data-sources

Hope this helps.

JS

==

Please Accept the answer if the information helped you. This will help us and others in the community as well.

Answer 3

The Sentinel portal has been updated. All of the out-of-box templates have been moved to the content hub. You first have to install the related content hup solution to see the related connectors, analytic rule, and workbook templates.

Answer 4

https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Azure%20Active%20Directory/ReleaseNotes.md

They removed the data connector and have added it back in the newer version!