Forum Discussion

Hemanth_Abbina's avatar
Hemanth_Abbina
Icon for Microsoft rankMicrosoft
Jan 18, 2021

Any plan to integrate/send MCAS activity events to Sentinel

Hi, The current MCAS to Sentinel connector is sending only alerts and discovery logs to Sentinel. Are there any plans to include the MCAS activity logs in the integration ? (The MCAS SIEM connector...
Cloud App Security
Hemanth_Abbina's avatar
Hemanth_Abbina
Icon for Microsoft rankMicrosoft
Jan 19, 2021

BemmelenPatrick Thanks for the quick response.

I'm talking about the MCAS API token. The API token created in the MCAS portal is associated with the user created it. If the user's PIM session expires, the API token won't work.

Christopher Brumm's avatar
Christopher Brumm
Brass Contributor
Mar 17, 2021
Hi,
we're experiencing the same problem. I think we will use the Break Glass Account. Does anyone have a better idea?

Resources