Forum Discussion
Connect Swimlane to pull Defender for Cloud Alerts
using Swimlane to ingest our alerts from Defender for cloud, I have setup our Access with the following items:
URL: https://graph.microsoft.com/v1.0/security/alerts
Token URL: https://login.microsoftonline.com/tenant-ID/oauth2/v2.0/token
Client ID: pulled from Registered App
Client Secret: Created a New Ceretificates & secrets and added that Value
Scope: https://graph.microsoft.com/.default
When I run my Action to capture the "List of Alerts", I receive the following error:
"reason": "Bad Request",
"json_body": {
"error": "invalid_request",
"error_description": "AADSTS90014: The required field 'scope' is missing from the credential. Ensure that you have all the necessary parameters for the login request...."
What parameters and how are those added and to which section? I'm new to API calls and not sure of the process.
Appreciate your help,
Serge