Can you please provide an example of a properly formatted auth type request when using "grantType": "client_credentials"? I am trying to connect to another MSFT end point to capture data not currently supported in Sentinel from the ODATA end points on M365 Defender. However, I can't seem to get the connector to work. The client_id and client_secret work perfectly from our powershell/function app integrations, but we'd rather move to the easier to maintain CCP. An example would be polling the "https://api.securitycenter.windows.com/api/software" end point in M365 Defender.
Here is whatI currently have.
Thanks!
"auth": {
"authType": "OAuth2",
"tokenEndpoint": "https://login.microsoftonline.com/{{TenantId}}/oauth2/2.0/token",
"tokenEndpointHeaders": {
"Accept": "application/json"
},
"isClientSecretInHeader": false,
"scope": "https://api.securitycenter.microsoft.com",
"resource": "https://api.securitycenter.microsoft.com",
"grantType": "client_credentials",
"contentType": "application/json",
"FlowName": "AuthCode"
}