Install the application and configure a source for the integration

Install and configure the Microsoft Defender for Endpoint integration from the ServiceNow Store on your ServiceNow AI Platform instance. Start creating capability profiles using the configurations.

Before you begin

Role required: sn_si.admin

Procedure

1. Download the Microsoft Defender for Endpoint integration from the ServiceNow Store and install it.
2. Navigate to Security Operations > Integrations > Integration Configurations.
3. Search for the Microsoft Defender for Endpoint tile, and click Configure.
4. On the form, fill in the following fields.

   Table 1. Configure Microsoft Defender for Endpoint

   Name	Name for the Microsoft Defender for Endpoint instance configuration.
   Base URL	The service base URL for Microsoft Defender for Endpoint
   Tenant ID	The Microsoft Defender for Endpoint Tenant ID. All actions would be performed on this instance.
   Client ID	Client ID for the application that you have registered in the Microsoft Azure portal.
   Client Secret	Client secret for your registered application.

5. Click Submit.

   Figure 1. Install and configure the application

   

Result

The Microsoft Defender for Endpoint configurations list is displayed with your new configuration record. You have completed the configuration for the Microsoft Defender for Endpoint.