Integrating Forescout Cloud with Microsoft Entra ID (SOAR)

Forescout Cloud integrates with with Microsoft Entra ID (formerly Azure AD) to support security orchestration, automation, and response (SOAR) workflows by automating your IT tasks to reduce strain on your team.

Before integrating, note the following Microsoft Entra ID credentials:

  • App ID
  • App Secret
  • Tenant ID

Note: To trigger the reset user password action, the Azure application needs the Privileged Authentication Administrator role.

For more information, see Microsoft Entra ID in the Microsoft documentation.

To integrate Forescout Cloud with Microsoft Entra ID to support SOAR:

  1. In the Forescout Cloud Console, select Administration > Integrations.
  2. Click the Add Application button.
  3. In the Category dropdown, select SOAR.
  4. In the Application dropdown, select Microsoft EntraID (Azure AD).
  5. In the Application Name field, enter a unique name for the integration.
  6. In the Configurations pane, enter the App ID, App Secret, and Tenant ID.
  7. Click the Add Application button to save the configuration.

After you integrate Forescout Cloud with Microsoft Entra ID, you can configure actions. For details on configuring SOAR actions, see Configuring SOAR actions.