Skip to main content

Scan Azure AD apps and credentials

POST 
/api/v1/integrations/azure-ad/scan

Accepts a pasted access token or authMethod: client_credentials (tenant ID, client ID, client secret). Commercial Azure only (login.microsoftonline.com, graph.microsoft.com); national clouds are not supported. Graph inventory recommends Application.Read.All. This is not CertOps Azure DNS. OpenID discovery is used only for Graph, to canonicalize the tenant GUID before minting.

Request​

Responses​

Integration scan result