Forum Discussion
Alex Verboon
Mar 04, 2019MVP
Connect to Azure Active Directory
Hello, I'm trying to connect Azure Sentinel to Azure Active Directory , however the process doesn't seem to end and it doesn't connect.
Uri Arjitecter
Mar 05, 2019Copper Contributor
Had same issue and I think you first need to enable integrate Azure AD Logs with Log Analytics - (https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-integrate-activity-logs-with-log-analytics ). After doing that it it successfully connected. HTH
- mustafak1Mar 05, 2019Copper Contributor
+1 here!
- ACMUHLYMar 05, 2019Copper ContributorThat resolved it for me. Thanks!!
- Alex VerboonMar 05, 2019MVPHi Uri
Do you Need to configure the same log analytics workspace for both Solutions?
Thanks
Alex- Uri ArjitecterMar 06, 2019Copper ContributorHi Alex,
Not sure if this is mandatory, I've used the same workspace for both, haven't tested yet with a different one.
Cheers,
Uri- Mar 11, 2019
Had the same issue. In my tenant, connecting Azure AD to Sentinel would not work. The process hung, just like Alex'. Going through the manual steps (https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-integrate-activity-logs-with-log-analytics) worked.
The funny thing is that other tenants (like a customer where I enabled the preview), did not have this issue.
Having some sort of log regarding this would be helpful to troubleshoot. Right now, the information is rather limited.
- Alex VerboonMar 06, 2019MVP
HI I have enabled azure monitor logs, since I saved the settings the status is as following since a couple of hours.
Updating diagnostics for '/providers/microsoft.aadiam'.