Connect Microsoft Entra ID

Use this guide to let Cracken read Microsoft Entra users and groups.

Prerequisites

• Permission to create an app registration and client secret
• An administrator who can grant consent for Microsoft Graph application permissions
• A Cracken realm where you can configure data integrations

Prepare the application

Create a single-tenant Microsoft Entra app registration and add these Microsoft Graph application permissions:

• User.Read.All
• Group.Read.All

Grant tenant-wide admin consent. Create a client secret and record its value.

Connect Microsoft Entra ID

1. Open Integration Center → Data Integrations.
2. On the Microsoft Entra ID card, click Install.
3. Enter the directory Tenant ID, application Client ID, and client-secret Value.
4. Click Test Connection, then Save & Connect.

Cracken can list users and groups available to the application.

Sources

• Microsoft Graph permissions reference
• Microsoft Graph permission best practices

Next steps

• Data Integrations — Review how connected security data flows into Cracken.
• Operations — Use the live user and group queries during assessment work.