✅ Feature availability: This integration is now available for Vanta Government customers.
Entra (Office 365) connects to Vanta using OAuth, allowing Vanta to import employees into Vanta seamlessly.
Please note that Vanta does not currently support GCC-High
Prerequisites
A minimum Microsoft 365 Business Standard + Microsoft Entra ID P1 subscription is required (see Vanta Integrations that may Require a Premium Service)
'Global Administrator' role in Microsoft Office365
Global Administrator permissions are needed to fetch users. Only your users' primary domain email addresses will be imported to populate the Vanta People page.
Connecting Vanta & Entra (Office 365)
To connect, go to the Integrations page and search for Amazon Web. For help navigating the Integrations page, see Integrations Page.
Click Connect.
A pop-up modal will appear with additional details verifying your permissions if required.
When you are ready to connect, select Connect Office 365.
You will be redirected to the Microsoft login page. Log in to the account with 'Global Administrator' permissions. Vanta will request read-only permissions to access the specified resources for your organization.
Select Accept
Once Accepted, You'll be redirected back to Vanta.
You will be presented with the option to choose whether to have Office populate the people page when users are added
If you have connected multiple identity providers, you will be prompted to Indicate which identity provider takes precedence for users in the connected IdPs.
See Integrating Multiple Identity Providers for more information
Configure the Scope
Establish which Entra (Office 365) items should be marked in or out of scope for your audit.
To learn more about controlling scope within Office, please see Controlling Scope Through Entra (Office 365)
You can configure scopes later by clicking Configure scope on the connected Entra (Office 365) card from the integrations page.
What to do if some users are not showing up in the Scope configuration
It may be that once connected, you are not seeing some or all of the users you expect to see in the Scope configuration. If that's the case, it is likely that this is due to the email field for this user not being populated in Entra. Please refer to this article on how to remedy that