Deployment procedures for Office 365

This example selects and configures Office 365 to onboard on FortiCASB. FortiCASB offers an API-based approach, pulling data directly from Office 365 via RESTful API. The FortiCASB portal accesses the data collected through API queries with OAuth2.0 authentication. FortiCASB combines these data to monitor and track Office 365 user activities and provide DLP data analysis for files on Office 365.

For instructions on deploying other SaaS cloud applications, see Add Cloud Application.

Microsoft online applications integration

When you add the Office 365 account on FortiCASB, if you are actively using any of the following Microsoft online applications with the same account, they are under monitoring and protection by FortiCASB.

Supported Microsoft online applications and details

Microsoft online applications	Monitoring details
Yammer	All chats and shared files
OneDrive	All files shared privately or publicly
SharePoint	Files in Document and "user-created" folders
Teams	All activities, group chats except personal chats, and shared files.
Azure Active Directory	All user activities.

Prerequisites

There are a few prerequisites before adding the Office 365 account on FortiCASB:

1. Office 365 account and license: create Office 365 account with global administrator role.
2. Activate Office 365 account audit log: enable Office 365 audit log to record user activities of the Office 365 account.
3. Add admin to SharePoint site: incorporate protection on Office 365 SharePoint sites by adding the Office 365 account to the site admin.
4. Add Office 365 account: activate site collection by adding the Office 365 account to FortiCASB.