Microsoft Intune コネクタ
You can use the Entra ID connector in DigiCert® Trust Lifecycle Manager to discover and monitor SAML signing certificates associated with enterprise applications. Monitor certificate expiration and receive notifications for certificates approaching expiration.
Before you begin
Before adding an Entra ID connector in Trust Lifecycle Manager, make sure the following prerequisites are satisfied:
DigiCert prerequisites
Your account must include an Entra ID tile in the Unified endpoint management category under Integrations > Connectors > Add connector. For help verifying or enabling this feature, contact your DigiCert account representative.
You need an active DigiCert sensor to establish and manage the connection to the Entra ID service. To learn more, see Deploy and manage sensors.
Entra ID prerequisites
You need the following integration parameters to configure the Entra ID connector in Trust Lifecycle Manager:
Tenant name for the Entra ID instance.
Application (client) ID for the registered Azure application used to access the Entra ID tenant.
Client secret value for remotely accessing the Azure application. To store and retrieve the secret from a PAM vault, you need a secrets manager connector.
To obtain the required integration parameters and prepare your Microsoft Entra ID environment for integration with Trust Lifecycle Manager, complete the following Azure setup.
Set up Azure application
You need an Azure application with the required permissions for Trust Lifecycle Manager to access your Entra ID tenant.
To register a new Azure application for Entra ID access:
In the Azure portal, search for or select Azure Active Directory from any page.
Select App registrations, then select New registration.
Enter a Name for the application and select Register.
Copy and save the Application (client) ID value for the new application.
To create a new client secret for accessing your Azure application:
On the Azure portal page for your registered application, select Certificates & secrets from the left-side navigation panel.
In the Client secrets tab, select the link to add a New client secret.
Enter a description and select an expiration date for the new client secret, then select Add.
Copy and save the Value for the new client secret.
重要
The client secret value cannot be viewed again after you close this view. If you lose this value, you must create a new client secret. Before the client secret expires, create a new one and update it in the Entra ID connector in Trust Lifecycle Manager to avoid service interruption.
To assign the required permissions that Trust Lifecycle Manager needs to access your Entra ID tenant via Azure:
On the Azure portal page for your registered application, select API permissions from the left-side navigation panel.
Under Configured permissions, select the link to Add a permission.
In the Request API permissions menu, select Microsoft Graph.
Expand the Application permissions, enable
Application.Read.All, and select Add permissions.
Microsoft Intune コネクタを追加する
To add the Entra ID connector in Trust Lifecycle Manager using the Integrations > Connectors > Add connector function:
次の手順
Trust Lifecycle Manager runs a scheduled discovery job to retrieve SAML signing certificates from Microsoft Entra ID and add them to the certificate inventory. You can configure the discovery interval, with a minimum interval of 15 minutes.
Use the certificate inventory to monitor the status and expiration of discovered certificates.
To receive notifications about upcoming expiration of discovered certificates, set up the Discovered certificate expiring notification type under Policies > Notifications. For more information, see Notifications and alerts.