Entra (Office 365) connects to Vanta using OAuth, allowing Vanta to import employees into Vanta seamlessly. 

Please note that Vanta does not currently support GCC-High

Prerequisites 

• A minimum Microsoft 365 Business Standard + Microsoft Entra ID P1 subscription is required (see Vanta Integrations that may Require a Premium Service)
• 'Global Administrator' role in Microsoft Office365​
  • Global Administrator permissions are needed to fetch users. Only your users' primary domain email addresses will be imported to populate the Vanta People page.

Connecting Vanta & Entra (Office 365)

• From the left-hand navigation panel, select Integrations
• Select the Available tab, and search for Entra (Office 365) 
• Select Connect
• A pop-up modal will appear with additional details verifying your permissions if required.
• When you are ready to connect, select Connect Office 365

• You will be redirected to the Microsoft login page. Log in to the account with 'Global Administrator' permissions. Vanta will request read-only permissions to access the specified resources for your organization.
• Select Accept

• Once Accepted, You'll be redirected back to Vanta.
• You will be presented with the option to choose whether to have Office populate the people page when users are added

• • If you have connected multiple identity providers, you will be prompted to Indicate which identity provider takes precedence for users in the connected IdPs.
    • See Integrating Multiple Identity Providers for more information

Configure the Scope

• Establish which Entra (Office 365) items should be marked in or out of scope for your audit.
  • To learn more about controlling scope within Office, please see Controlling Scope Through Entra (Office 365)

• You can configure scopes later by clicking Configure scope on the connected Entra (Office 365) card from the integrations page. 

What to do if some users are not showing up in the Scope configuration

It may be that once connected, you are not seeing some or all of the users you expect to see in the Scope configuration. If that's the case, it is likely that this is due to the email field for this user not being populated in Entra. Please refer to this article on how to remedy that

Updated April 08, 2025 11:21