Office 365

FortiCASB offers an API-based approach, pulling data directly from Office 365 via RESTful API. Then FortiCASB portal accesses the data collected through API queries with OAuth2.0 authentication. Subsequently, FortiCASB combines these data to monitor and track Office 365 user activities, provide DLP Data Analysis for files on Office 365.

Microsoft Online Apps Integration

Beginning in 2021, the FortiCASB version 21.2 starts supporting multiple Microsoft online apps under the same Office 365 account.

When you add the Office 365 account on FortiCASB, if you are actively using any of these Microsoft online apps with the same account, they will be under monitoring and protection by FortiCASB.

Supported Microsoft Online Apps and Details:

Microsoft Online Apps	Monitoring Details
Microsoft Yammer	Monitors all chats and shared files.
Microsoft One Drive	Monitors all files shared privately or publicly.
Microsoft Sharepoint	Monitors files in Document and "user-created" folders.
Microsoft Teams	Monitors all activities, group chats except personal chats and shared files.
Azure Active Directory	Monitors all user activities.

Prerequisites

There are a few prerequisite before adding the Office 365 account on FortiCASB. Please follow the steps below.

1. Office 365 Account and License - Create Office 365 account with Global Administrator role.
2. Activate Office 365 Account Audit Log - Enable Office 365 Audit Log to record user activities of the Office 365 account.
3. Add Admin to Sharepoint Site - Incorporate protection on Office 365 Sharepoint sites by adding the Office 365 account to the site admin.
4. Add Office 365 Account - Activate site collection by adding the Office 365 account to FortiCASB.

New Office 365 Users

After the onboarding process is completed, all the Office 365 users under the account will be protected through Data Scan.

However, when a new Office 365 user is added on the account, the new user's OneDrive data is not proteceted. Please see New Office 365 User Added After Onboarding.