{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-guides/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"Microsoft Defender EASM Vulnerabilities Configuration Guide","siteUrl":"https://docs.synqly.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"introduction","__idx":0},"children":["Introduction"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Microsoft Defender External Attack Surface Management (EASM) discovers and monitors the internet-facing resources your organization owns. This guide shows you how to prepare an application registration in Microsoft Entra ID and gather the values you need to configure the integration."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"prerequisites","__idx":1},"children":["Prerequisites"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Before you begin, ensure that you have:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["An Azure subscription with a Defender EASM workspace"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Permission to register an application in Microsoft Entra ID and to assign roles on the workspace"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"required-permissions","__idx":2},"children":["Required Permissions"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Role"},"children":["Role"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Scope"},"children":["Scope"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Purpose"},"children":["Purpose"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Reader"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The Defender EASM workspace"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read the assets and observations the workspace has discovered"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"registering-an-application","__idx":3},"children":["Registering an Application"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["In the Azure portal, register a new application in Microsoft Entra ID"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Create a client secret for the application. Take note of the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Client ID"]}," and the secret value, and store them in a safe location"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open your Defender EASM workspace, then select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Access control (IAM)"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Assign the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Reader"]}," role to the application you registered"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You have now registered an application. Proceed to the next section titled ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#finding-your-workspace-details"},"children":["Finding Your Workspace Details"]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information on registering an application, see the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app"},"children":["Microsoft register an application docs page"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"finding-your-workspace-details","__idx":4},"children":["Finding Your Workspace Details"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["In the Azure portal, open your Defender EASM workspace"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Overview"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Take note of the subscription, resource group, workspace name, and region"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The workspace address holds the same four values if you prefer to read them there. It uses this format:"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://{region}.easm.defender.microsoft.com/subscriptions/{subscription}/resourceGroups/{resource group}/workspaces/{workspace name}"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"configuring-the-integration","__idx":5},"children":["Configuring the Integration"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To configure a new Microsoft Defender EASM integration, provide each of the values as defined below:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Integration Parameter"},"children":["Integration Parameter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Client ID"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The Client ID of the application you registered"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Client Secret"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The client secret value you took note of when you registered the application"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Tenant ID"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The Microsoft Entra ID tenant that holds the application you registered"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Subscription ID"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The subscription you took note of in the previous section"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Resource Group"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The resource group you took note of in the previous section"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Workspace Name"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The workspace name you took note of in the previous section"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Region"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["The region you took note of in the previous section ",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]}," Example ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["eastus"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"additional-resources","__idx":6},"children":["Additional Resources"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://learn.microsoft.com/en-us/azure/external-attack-surface-management/overview"},"children":["What is Microsoft Defender EASM?"]}]}]}]},"headings":[{"value":"Introduction","id":"introduction","depth":2},{"value":"Prerequisites","id":"prerequisites","depth":2},{"value":"Required Permissions","id":"required-permissions","depth":2},{"value":"Registering an Application","id":"registering-an-application","depth":2},{"value":"Finding Your Workspace Details","id":"finding-your-workspace-details","depth":2},{"value":"Configuring the Integration","id":"configuring-the-integration","depth":2},{"value":"Additional Resources","id":"additional-resources","depth":2}],"frontmatter":{"slug":"guides/provider-configuration/defendereasm-vulnerabilities-setup","seo":{"title":"Microsoft Defender EASM Vulnerabilities Configuration Guide"}},"lastModified":"2026-10-16T15:33:14.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/provider-configuration/defendereasm-vulnerabilities-setup","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}