...
Give permissions to our Azure app. If you intend to only use the Proxy based Ethical-Wall and DLP you will need to give permissions to the Sign In app How to configure the SphereShield Azure App for Sign in and groups? , If you also intend to use the API based Ethical-Wall and DLP (Hybrid mode) you will only need to give permissions to the Compliance app How to configure the SphereShield Azure App for Compliance and Channel Management The Sign-In App is needed purely to access the portal using O365 authentication. The compliance App needs permissions to control communication using MS Graph API. The permissions that are required for the different Apps can be found here. Permissions required for SphereShield Azure app
When using the proxy approach the follwoing steps need to be followed.
...
| Expand |
|---|
| title | insert in “Subject Alternative Name” |
|---|
|
*.hockeyapp.net
*.officeapps.live.com
*http://officeapps.live.com
*.lync.com
*.dc.trouter.io
*.microsoftazuread-sso.com
*.microsoftonline.com
secure.aadcdn.microsoftonline-p.com
*.microsoftonline-p.com
*.microsoftonline-p.net
*.msappproxy.net
*.msecnd.net
*.office.com
*.office.net
*.office365.com
*.onenote.net
*.outlook.com
*.sharepoint.com
*.sharepointonline.com
*.skype.com
*.windows.net
*.pipe.aria.microsoft.com
http://teams.microsoft.com
*.teams.microsoft.com
*.ng.msg.teams.microsoft.com
*.trouter.teams.microsoft.com
*.presence.teams.microsoft.com
*.data.microsoft.com
*.asm.skype.com
*.broker.skype.com
*.cc.skype.com
*.config.skype.com
*.conv.skype.com
*.edge.skype.com
*.msg.skype.com
*.tpc.skype.com
*.pipe.skype.com
pipe.skype.com
*.teams.skype.com
*.notifications.teams.microsoft.com
*.userstore.skype.com
*.manage.microsoft.com
*.sfx.ms
*.adjust.com
*.asyncgw.teams.microsoft.com
*.agatskype.net
*.vo.msecnd.net
*.telemetry.microsoft.com
*.msftauth.net
*.msauth.net
*.msedge.net
*.msgapi.teams.microsoft.com *.substrate.office.com |
...