Connect Smartsheet to Microsoft Defender for Cloud Apps

Note

  • We've renamed Microsoft Cloud App Security. It's now called Microsoft Defender for Cloud Apps. In the coming weeks, we'll update the screenshots and instructions here and in related pages. For more information about the change, see this announcement. To learn more about the recent renaming of Microsoft security services, see the Microsoft Ignite Security blog.

  • Microsoft Defender for Cloud Apps is now part of Microsoft 365 Defender. The Microsoft 365 Defender portal allows security admins to perform their security tasks in one location. This will simplify workflows, and add the functionality of the other Microsoft 365 Defender services. Microsoft 365 Defender will be the home for monitoring and managing security across your Microsoft identities, data, devices, apps, and infrastructure. For more information about these changes, see Microsoft Defender for Cloud Apps in Microsoft 365 Defender.

This article describes how to connect Microsoft Defender for Cloud Apps to your existing Smartsheet via the App Connector APIs. The resulting connection gives you visibility into and control over your organization's use of Smartsheet.

Prerequisites

  • The Smartsheet user used to log in to Smartsheet must be a System Admin.
  • Event Reporting must be enabled by Smartsheet, either through standalone purchase or via an Enterprise plan with the Advance Platinum package.

How to connect Smartsheet to Defender for Cloud Apps

Configure Smartsheet

Note

The Smartsheet license must be an Enterprise plan with the Platinum package.

  1. Register to add Developer Tools to your existing Smartsheet account:

    1. Go to the Developer Sandbox Account Registration page.

    2. Enter your Smartsheet email address in the text box:

      Screenshot that shows the Developer Sandbox Account Registration page.

    3. An activation mail will appear in your mailbox. Activate Developer Tools by using the activation mail.

    4. In Smartsheet, select Create Developer Profile. Enter your name and email address. Select Save and then Close:

      Screenshot that shows the name and email text boxes.

  2. In Smartsheet, select Developer Tools:

    Screenshot that shows the Developer Tools menu item.

  3. In the Developer Tools dialog, select Create New App:

    Screenshot that shows the Create New App button.

  4. In the Create New App dialog, provide the following values:

    • App name: For example, Microsoft Defender for Cloud Apps.

    • App description: For example, Microsoft Defender for Cloud Apps connects to Smartsheet via its API and detects threats within users' activity.

    • App URL: https://portal.cloudappsecurity.com

    • App contact/support: https://learn.microsoft.com/cloud-app-security/support-and-ts

    • App redirect URL: https://portal.cloudappsecurity.com/api/oauth/saga

      Note

      • For US Government GCC customers, enter the following value: https://portal.cloudappsecuritygov.com/api/oauth/saga
      • For US Government GCC High customers, enter the following value: https://portal.cloudappsecurity.us/api/oauth/saga
    • Publish App?: Select.

    • Logo: Leave blank.

      Screenshot that shows the Create New App dialog.

  5. Select Save. Copy the App client id and the App secret that are generated. You'll need them in the following steps.

Configure Defender for Cloud Apps

Note

The Smartsheet user configuring the integration must always remain a Smartsheet admin, even after the connector is installed.

  1. In the Defender for Cloud Apps portal, select Investigate and then Connected apps.

  2. On the App connectors tab, select the plus sign, and then select Smartsheet.

  3. In the window that appears, give the connector a descriptive name, and then select Connect Smartsheet:

    Screenshot that shows the Connect Smartsheet button.

  4. On the next screen, enter these values:

    • Client ID: The app client ID that you saved earlier.
    • Client Secret: The app secret that you saved earlier.
  5. Select Connect in Smartsheet.

  6. Make sure the connection succeeded by selecting Test now. The test might take a few minutes. After you see a success notice, select Close.

  7. The first connection can take up to four hours to get all users and their activities in the seven days before the connection.

  8. After the connector's Status is marked as Connected, the connector is live and works.

Limitations

  • Log in and log out activities aren't supported by Smartsheet.
  • Smartsheet activities don't contain IP addresses.
  • System activities are shown with the Smartsheet account name.

Rate limits

The default rate limit is 300 requests per minute. For more information, see the Smartsheet documentation.

Next steps

If you run into any problems, we're here to help. To get assistance or support for your product issue, please open a support ticket.