Forum Discussion

MVP

Mar 04, 2019

Connect to Azure Active Directory

Hello, I'm trying to connect Azure Sentinel to Azure Active Directory , however the process doesn't seem to end and it doesn't connect.

Copper Contributor

Mar 05, 2019

Had same issue and I think you first need to enable integrate Azure AD Logs with Log Analytics - (https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-integrate-activity-logs-with-log-analytics ). After doing that it it successfully connected. HTH

MVP

Mar 05, 2019

Hi Uri

Do you Need to configure the same log analytics workspace for both Solutions?

Thanks
Alex

Uri Arjitecter
Copper Contributor
Mar 06, 2019
Hi Alex,

Not sure if this is mandatory, I've used the same workspace for both, haven't tested yet with a different one.

Cheers,

Uri
- mvanhorenbeeck
  MVP
  Mar 11, 2019
  Had the same issue. In my tenant, connecting Azure AD to Sentinel would not work. The process hung, just like Alex'. Going through the manual steps (https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-integrate-activity-logs-with-log-analytics) worked.
  
  The funny thing is that other tenants (like a customer where I enabled the preview), did not have this issue.
  
  Having some sort of log regarding this would be helpful to troubleshoot. Right now, the information is rather limited.
  - Alex Verboon
    MVP
    Mar 31, 2019
    mvanhorenbeeck& all,
    
    I solved the issue yesterday, seemded to be a permission issue, while I had full rights on the workspace, I did not have that on the Azure Tenant itself, hence once my colleague logged in with Azure Tenant owner rights , the activation worked nicely.