{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-guides/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["tabs","tab"]},"type":"markdown"},"seo":{"title":"Microsoft 365 Management Activity Email Security Provider Configuration Guide","siteUrl":"https://docs.synqly.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"introduction","__idx":0},"children":["Introduction"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Microsoft 365 Management Activity is an audit activity feed for Microsoft 365. It reports the actions that users, administrators and policies take across Microsoft 365 services, including the email messages that users send. This guide walks you through the steps to gather the necessary information and configure a Microsoft app registration for the purpose of creating a Microsoft 365 Management Activity Email Security integration."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"prerequisites","__idx":1},"children":["Prerequisites"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Before you begin, ensure that you have:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Access to the Microsoft Entra admin center with a role that can create an app registration, grand admin consent, and change the audit settings for the organization."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Auditing turned on for your Microsoft 365 organization",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Consult the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://learn.microsoft.com/en-us/purview/audit-log-enable-disable"},"children":["Microsoft documentation"]}," if needed"]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"registering-an-application","__idx":2},"children":["Registering an Application"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"required-permissions","__idx":3},"children":["Required Permissions"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Application Permission"},"children":["Application Permission"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Purpose"},"children":["Purpose"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["ActivityFeed.Read"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read the audit activity feed of the organization. This permission covers the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Send"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["SendAs"]}," and ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["SendOnBehalf"]}," audit operations."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["ActivityFeed.ReadDlp"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read the data loss prevention (DLP) part of the same feed, required to retrieve attachment information and MipLabels."]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"procedure","__idx":4},"children":["Procedure"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Sign in to the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://portal.azure.com"},"children":["Microsoft Azure portal"]},". Use an account that can create an app registration and grant admin consent"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["App Registrations"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["New registration"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Fill in the field titled ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Name"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["In the section titled ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Supported account types"]},", select the single tenant option"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Leave the field titled ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Redirect URI"]}," empty"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Register"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["On the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Overview"]}," page, take note of the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Application (client) ID"]}," and the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Directory (tenant) ID"]},". Store both values in a safe location"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API permissions"]}," from the sidebar on the left"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add a permission"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Microsoft APIs"]}," tab, then select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Office 365 Management APIs"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Application permissions"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Add all of the required permissions. See the section above titled ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#required-permissions"},"children":["Required Permissions"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add permissions"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Grant admin consent"]},", then confirm the dialog that appears"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["In the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Configured permissions"]}," table, examine each permission. The ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Type"]}," column must read ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Application"]},". The ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Status"]}," column must show that your organization granted consent",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Note: The integration runs without a signed-in user, so a delegated permission does not work"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You have now registered an application. Proceed to the next section titled ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#generating-credentials"},"children":["Generating Credentials"]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information on app registrations, see the Microsoft ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app"},"children":["Quickstart: Register an application"]}," docs page."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"generating-credentials","__idx":5},"children":["Generating Credentials"]},{"$$mdtype":"Tag","name":"Tabs","attributes":{"size":"medium"},"children":[{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"Client Secret","disable":false},"children":[{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["In the application registration, select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Certificates & secrets"]}," from the sidebar on the left"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Client secrets"]}," tab, then select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["New client secret"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Fill in the field titled ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Description"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select a value for the field titled ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Expires"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Note: A client secret has a maximum lifetime of 24 months. The integration stops when the secret expires. Record the expiry date and replace the secret before that date"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Take note of the value in the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Value"]}," column and store it in a safe location",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Note: The portal shows two columns, ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Secret ID"]}," and ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Value"]},". The integration needs the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Value"]},". The portal shows the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Value"]}," only on this page, and does not show it again"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You have now created a client secret. Proceed to the next section titled ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#configuring-the-integration"},"children":["Configuring the Integration"]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information on client secrets, see the Microsoft ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://learn.microsoft.com/en-us/entra/identity-platform/how-to-add-credentials"},"children":["Add and manage app credentials"]}," docs page."]}]},{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"Certificate","disable":false},"children":[{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Obtain a certificate and its private key. The certificate file must be a ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":[".cer"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":[".pem"]}," or ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":[".crt"]}," file. The private key must have no passphrase",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Note: Microsoft recommends a certificate from a public certificate authority for production use"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["In the application registration, select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Certificates & secrets"]}," from the sidebar on the left"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Certificates"]}," tab, then select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Upload certificate"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select your certificate file, then select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Keep the certificate file and the private key file. The integration needs the contents of both"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You have now added a certificate. Proceed to the next section titled ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#configuring-the-integration"},"children":["Configuring the Integration"]}," ",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information on certificate credentials, see the Microsoft ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://learn.microsoft.com/en-us/entra/identity-platform/how-to-add-credentials"},"children":["Add and manage app credentials"]}," docs page."]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"configuring-the-integration","__idx":6},"children":["Configuring the Integration"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To configure a new Microsoft 365 Management Activity integration, provide each of the values as defined below:"]},{"$$mdtype":"Tag","name":"Tabs","attributes":{"size":"medium"},"children":[{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"Client Secret","disable":false},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Integration Parameter"},"children":["Integration Parameter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Tenant ID"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["This is the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Directory (tenant) ID"]}," value from the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Overview"]}," page of the application registration. ",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]}," Example: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["f81d4fae-7dec-11d0-a765-00a0c91e6bf6"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Client ID"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["This is the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Application (client) ID"]}," value from the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Overview"]}," page of the application registration"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Client Secret"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["This is the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Value"]}," of the client secret from the steps above. It is not the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Secret ID"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Cloud (Optional)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["This is the Microsoft 365 cloud that hosts your organization."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Operations (Optional)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["These are the Exchange audit operations that the integration reports. The choices are ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Send"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["SendAs"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["SendOnBehalf"]}," and ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["MipLabel"]},". By default, Microsoft 365 Management Activity integrations report all four. Remove ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["MipLabel"]}," to report send events only"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"TabItemFragment","attributes":{"label":"Certificate","disable":false},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Integration Parameter"},"children":["Integration Parameter"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Tenant ID"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["This is the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Directory (tenant) ID"]}," value from the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Overview"]}," page of the application registration. ",{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]}," Example: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["f81d4fae-7dec-11d0-a765-00a0c91e6bf6"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Client ID"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["This is the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Application (client) ID"]}," value from the ",{"$$mdtype":"Tag","name":"em","attributes":{},"children":["Overview"]}," page of the application registration"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Certificate"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["These are the contents of the certificate file from the steps above. The contents start with ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["-----BEGIN CERTIFICATE-----"]},". A file that holds a chain of several certificates is also correct. Do not supply a file that also holds a private key"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Private Key"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["These are the contents of the private key file of that certificate. The contents start with ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["-----BEGIN PRIVATE KEY-----"]}," or ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["-----BEGIN RSA PRIVATE KEY-----"]},". Do not supply a file that also holds a certificate"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Cloud (Optional)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["This is the Microsoft 365 cloud that hosts your organization."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Operations (Optional)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["These are the Exchange audit operations that the integration reports. The choices are ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Send"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["SendAs"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["SendOnBehalf"]}," and ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["MipLabel"]},". By default, Microsoft 365 Management Activity integrations report all four. Remove ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["MipLabel"]}," to report send events only"]}]}]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"additional-resources","__idx":7},"children":["Additional Resources"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://learn.microsoft.com/en-us/purview/audit-log-enable-disable"},"children":["Turn auditing on or off"]}," - learn how to enable auditing in your organization."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://learn.microsoft.com/en-us/purview/audit-mailboxes"},"children":["Manage mailbox auditing"]}," - learn how to manage mailbox auditing in your organization."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://learn.microsoft.com/en-us/purview/audit-troubleshooting-scenarios#search-for-mailbox-activities-performed-by-users-with-non-e5-licenses"},"children":["Search for mailbox activities performed by users with non-E5 licenses"]}," - learn how to manage auditing for mailboxes that don't have E5 licenses."]}]}]},"headings":[{"value":"Introduction","id":"introduction","depth":2},{"value":"Prerequisites","id":"prerequisites","depth":2},{"value":"Registering an Application","id":"registering-an-application","depth":2},{"value":"Required Permissions","id":"required-permissions","depth":3},{"value":"Procedure","id":"procedure","depth":3},{"value":"Generating Credentials","id":"generating-credentials","depth":2},{"value":"Configuring the Integration","id":"configuring-the-integration","depth":2},{"value":"Additional Resources","id":"additional-resources","depth":2}],"frontmatter":{"slug":"guides/provider-configuration/microsoft-365-management-activity-emailsecurity-setup","seo":{"title":"Microsoft 365 Management Activity Email Security Provider Configuration Guide"}},"lastModified":"2026-09-18T17:54:36.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/provider-configuration/microsoft-365-management-activity-emailsecurity-setup","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}