mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-07-06 04:01:51 +00:00
Mario Rodriguez Lopez
dcb9267c2f
Co-authored-by: MrCloudSec <hello@mistercloudsec.com> Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
24 lines
942 B
Markdown
24 lines
942 B
Markdown
# Microsoft365 authentication
|
|
|
|
By default Prowler uses MsGraph Python SDK identity package authentication methods using the class `ClientSecretCredential`.
|
|
This allows Prowler to authenticate against microsoft365 using the following methods:
|
|
|
|
- Service principal authentication by environment variables (Enterprise Application)
|
|
- Current CLI credentials stored
|
|
- Interactive browser authentication
|
|
|
|
To launch the tool first you need to specify which method is used through the following flags:
|
|
|
|
```console
|
|
# To use service principal authentication
|
|
prowler microsoft365 --sp-env-auth
|
|
|
|
# To use cli authentication
|
|
prowler microsoft365 --az-cli-auth
|
|
|
|
# To use browser authentication
|
|
prowler microsoft365 --browser-auth --tenant-id "XXXXXXXX"
|
|
```
|
|
|
|
To use Prowler you need to set up also the permissions required to access your resources in your Microsoft365 account, to more details refer to [Requirements](../../getting-started/requirements.md)
|