Microsoft 365

The Microsoft 365 integration enables FireTail to automatically scan and discover AI consumption within your Microsoft 365 environment, providing enhanced visibility and control over your AI workforce, as well as supporting real-time monitoring and security management.

Before you begin, allow pop-ups for the FireTail app domain. The authentication flow opens two pop-up windows, and Chrome blocks the second one by default. You will also need a Microsoft 365 global administrator to grant consent.

To set up the integration:

1. In the side menu, go to Settings, then select Integrations.
2. Click Create Integration. Filter by selecting the Discovery category.
3. Select Microsoft 365.
4. In the Name of Integration field, enter a name for the integration.
5. Select a project from the dropdown, or click Create to create a new project. This is the project that will be associated with the integration. The integration will discover employees through SSO logins and email signups.
6. Click Authenticate with Microsoft 365.
7. A new window will open. Log in to Microsoft 365 (if required) and grant admin consent.
8. A second window will open to authorize the application. If it does not appear, see Allow pop-ups before authenticating.

Once authenticated, the integration will be setup and begin scanning.

Allow pop-ups before authenticating

The Microsoft 365 authentication flow opens two pop-up windows in sequence:

1. Admin consent. A Microsoft global administrator grants FireTail the tenant-wide permissions it needs. This window opens when you click Authenticate with Microsoft 365.
2. Authorizing the application. After consent is granted, the first window closes and a second one opens to authorize the application and return an access code to FireTail.

Because the second pop-up is opened in response to the first one completing, rather than in response to a click, Chrome's pop-up blocker will block it by default. Other Chromium-based browsers, such as Microsoft Edge, behave the same way.

When this happens the flow appears to stall after admin consent: the first window closes, no second window appears, and the integration is never created. Chrome shows a blocked pop-up icon in the right of the address bar.

To avoid this, allow pop-ups for the FireTail app domain before you start:

1. In Chrome, click the padlock icon to the left of the address bar, then select Site settings.
2. Set Pop-ups and redirects to Allow.
3. Return to FireTail and click Authenticate with Microsoft 365 again.

If the pop-up was already blocked, you can instead click the blocked pop-up icon in the address bar, select Always allow pop-ups and redirects from..., then re-run the authentication from step 6 above. You will need to complete admin consent again.

Reauthenticate the Integration

If you need to update the permissions granted to FireTail, you can reauthenticate the integration:

• Go to the Existing Integrations tab. Locate the Microsoft 365 integration you previously set up. Click the integration, then click Re-authenticate with Microsoft 365. Complete the authorization flow to refresh access and permissions.

Reauthenticating uses the same two-window flow as the initial setup, so pop-ups must be allowed for this to complete.

View discovered resources

The discovered AI resources can be viewed going to Workforce in the side menu.