Edit

Connect Zoom to Microsoft Defender for Cloud Apps

  • Article

Note

Microsoft Defender for Cloud Apps is now part of Microsoft 365 Defender and can be accessed through its portal at: https://security.microsoft.com. Microsoft 365 Defender correlates signals from the Microsoft Defender suite across endpoints, identities, email, and SaaS apps to provide incident-level detection, investigation, and powerful response capabilities. It improves your operational efficiency with better prioritization and shorter response times which protect your organization more effectively. For more information about these changes, see Microsoft Defender for Cloud Apps in Microsoft 365 Defender.

This article provides instructions for connecting Microsoft Defender for Cloud Apps to your existing Zoom environment using the app connector API. This connection gives you visibility into and control over Zoom use.

Prerequisites

Before connecting Zoom to Defender for Cloud Apps, make sure that you have the following prerequisites:

  • A Zoom PRO plan or higher

  • Access to Zoom as an account owner or admin, which is required to access the Zoom API.

    The admin account is used only for initial consent while connecting Zoom to Defender for Cloud Apps. Defender for Cloud Apps uses an OAuth app for daily transactions.

How to connect Zoom to Defender for Cloud Apps

  1. Sign into Zoom as an account owner or admin.

  2. In the Microsoft 365 Defender portal, select Settings. Then choose Cloud Apps. Under Connected apps, select App Connectors.

  3. In the App connectors page, select + Connect an app, and then Zoom. Screenshot of the App Connectors > Zoom pop-up.

  4. In the Instance name page of the pop-up, give the connector a descriptive name, and select Next.

  5. In the External link page, select Connect Zoom. You're redirected to the Zoom page, where you're prompted to allow the connection.

  6. In Zoom, select to allow the connection.

    In Microsoft 365 Defender, the External link page of the pop-up is updated to confirm that you're connected. For example:

    Screenshot of the success message in Microsoft 365 Defender.

  7. In the Microsoft 365 Defender pop-up, select Done.

    Note

    • The first connection can take up to 4 hours to get all users and their activities.
    • The activities that will show are the activities that were generated in the last 7 days before the connection.
    • After the connector's Status is marked as Connected, the connector is live and works.

Rate limits

  • Pro accounts: 30 requests per second
  • Business accounts: 80 requests per second

Next steps

Control cloud apps with policies

If you run into any problems, we're here to help. To get assistance or support for your product issue, please open a support ticket.