Edit

Connect OneLogin to Microsoft Defender for Cloud Apps

  • Article

Note

Microsoft Defender for Cloud Apps is now part of Microsoft 365 Defender, which correlates signals from across the Microsoft Defender suite and provides incident-level detection, investigation, and powerful response capabilities. For more information, see Microsoft Defender for Cloud Apps in Microsoft 365 Defender.

This article provides instructions for connecting Microsoft Defender for Cloud Apps to your existing OneLogin app using the App Connector APIs. This connection gives you visibility into and control over your organization's OneLogin use.

Prerequisites

  • The OneLogin account used for logging into OneLogin must be a Super User. For more information about OneLogin administrative privileges, see this article.

How to connect OneLogin to Defender for Cloud Apps

Configure OneLogin

  1. Go to the OneLogin admin portal. Select API Credentials in the Developers dropdown menu.

    Select API credentials.

  2. Select New Credential.

  3. Name your new application as Microsoft Defender for Cloud Apps, choose Read all permissions, and select Save.

    Create new API credential.

  4. Copy the Client ID and the Client Secret. You'll need them in the following steps.

Configure Defender for Cloud Apps

  1. In the Microsoft 365 Defender portal, select Settings. Then choose Cloud Apps. Under Connected apps, select App Connectors.

  2. In the App connectors page, select +Connect an app, followed by OneLogin.

  3. In the next window, give the connector a descriptive name, and select Next.

    Connect OneLogin.

  4. In the Enter details window, enter the Client ID and the Client Secret that you copied and select Submit.

  5. In the Microsoft 365 Defender portal, select Settings. Then choose Cloud Apps. Under Connected apps, select App Connectors. Make sure the status of the connected App Connector is Connected.

  6. The first connection can take up to 4 hours to get all users and their activities after the connector was established.

  7. After the connector's Status is marked as Connected, the connector is live and working.

Next steps

Control cloud apps with policies

If you run into any problems, we're here to help. To get assistance or support for your product issue, please open a support ticket.