Microsoft 365 Integration

Overview

Connecting Microsoft 365 enables Bleach to monitor and secure your email, users, SharePoint, OneDrive, and Teams environments. This integration provides comprehensive visibility into your M365 security posture.

Prerequisites

• Global Administrator or Security Administrator role in Microsoft 365
• Azure AD tenant with appropriate licensing
• Permission to grant consent for enterprise applications

Step 1: Initiate Connection

1. Navigate to Integrations → Available Integrations
2. Find Microsoft 365 and click "Connect"
3. Review the permissions that will be requested
4. Click "Authorise with Microsoft"

Step 2: Microsoft Authentication

1. Sign in with your Microsoft admin account
2. Review the requested permissions
3. Click "Accept" to grant consent on behalf of your organisation
4. Wait for redirect back to Bleach

Step 3: Configure Integration Settings

1. Select which M365 services to monitor (Exchange, SharePoint, Teams, etc.)
2. Configure sync frequency (real-time recommended)
3. Set up user scope (all users or specific groups)
4. Enable or disable specific security checks

Step 4: Initial Sync

1. Click "Start Sync" to begin data collection
2. Initial sync may take 15-60 minutes depending on tenant size
3. Monitor progress on the Integration Status page
4. You'll receive a notification when sync completes

What's Monitored

Once connected, Bleach monitors:

• User accounts and authentication settings
• Email security configurations
• SharePoint and OneDrive sharing settings
• Teams guest access and external sharing
• Admin roles and privileged access
• Conditional Access policies

Troubleshooting

If you encounter issues:

• Ensure you have the correct admin role
• Check that third-party app consent is enabled in Azure AD
• Verify your M365 licenses include the required services
• Contact support if authentication repeatedly fails