Does a 3rd party SaaS provider need to be Fedramp certified to connect to GCC High info through API

JDubbed-5690 0 Reputation points
2024-06-05T16:17:51.1633333+00:00

We have a third-party SaaS software that requires an API connection to O365 to ingest email (headers/bodies) and calendar items. One of our business units uses GCC High, and we're wondering if the third-party software can connect to our GCC High O365 using the API. They are not Fedramp certified and I can't find a definitive answer whether or not a vendor connecting to GCC High API needs to be Fedramp Moderate/High certified.

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,866 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.