Product: Huntress Managed Identity Threat Detection and Response (ITDR, formerly MDR for Microsoft 365)
Environment: Huntress Portal
Summary: How to remap Microsft 365 integrations with ITDR
BEFORE YOU PROCEED
- Document the mapping relationship between the Microsoft 365 tenant you want to remap and the Huntress organization it is mapped to. In many cases, these names are the same. In some cases, you may have mapped your Microsoft 365 tenants to Huntress organizations with slightly different naming conventions. For example, a Microsoft 365 tenant named Vandelay Industries might be mapped to a Huntress organization named VAND.
- Verify the credentials on your Microsoft 365 tenant administrator account. To successfully complete a remapping, you will need to log in to your Microsoft 365 tenant account with credentials for that tenant account. For partners with many Microsoft 365 tenants, this may sometimes be a bit confusing. A best practice is to attempt to login to the Microsoft 365 tenant from portal.azure.com to verify that your credentials are valid for that tenant.
- Verify the permissions on your Microsoft 365 tenant administrator account. The credentials used to map your Microsoft 365 tenant to Huntress must have global administrator permissions. Please verify that this account has those permissions for the tenant in question before proceeding.
To remap a Microsoft 365 tenant to Huntress, you will need to sign into Huntress.io and navigate to the menu option in the upper right, then select: Integrations.
In the Huntress Integrations menu, click the pencil icon for the Microsoft 365 integration.
Inside the configuration menu for your Microsoft 365 integration, find the Huntress organization that needs to be remapped. Click the three dots at the end of that organization’s row, and click the Unmap button.
After clicking the Unmap button, please make sure to click the Save Changes button below the mappings window.
This will unmap your Microsoft 365 tenant from your associated Huntress organization.
After successfully unmapping the Microsoft 365 tenant from the Huntress organization and saving the changes, please click the Integrate Tenant button in the Integrate Tenants panel.
A modal will appear on your screen. Please select the Huntress organization you would like to map your Microsoft 365 tenant to from the dropdown list.
Then, click the Sign in with Microsoft button. You will be redirected to the Microsoft sign-in page. Please sign in to the Microsoft 365 tenant you would like to map to your Huntress organization.
After successfully signing in to your Microsoft 365 tenant, you will be redirected to the ITDR for Microsoft 365. You should see a blue banner indicating that the mapping was successfully completed.
Huntress should start receiving user data and events from your Microsoft 365 tenant within a few minutes. You can verify that Huntress is receiving this data by navigating to your ITDR for Microsoft 365 dashboard and clicking on the View all Events and/or View all Users buttons.
Please reach out to Support if you have any questions or concerns.