Azure Active Directory data connector missing

Courtney Cowling - ParaFlare 0 Reputation points
2023-10-31T05:14:42.8466667+00:00

Hello all,

Something that I've done on the regular has stopped working.

Before reaching out to support, wondering if settings have just moved somewhere..

Basically trying to add the Azure Active Directory data connector to a Sentinel instance. Usually I'd pop into the Content Hub and hit install and good to go.

AAD no longer shows when in the content hub when filtering for data connectors and upon closer inspection at the solution, data connector is no longer listed in the Content Type or part of the solution when you install it at all.

I've searched for Entra ID etc but they are not listed (yet).

Any ideas what has suddenly changed here?

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
981 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,521 questions

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. JamesTran-MSFT 36,371 Reputation points Microsoft Employee
    2023-11-01T18:51:25.5966667+00:00

    @Courtney Cowling - ParaFlare

    Thank you for your post and I'm glad that your issue was resolved!

    When looking into similar issues, I did find another customer experiencing the same thing and it looks like the Azure AD Connector was removed from Microsoft Sentinel and later re-added.

    Microsoft Sentinel - Azure Active Directory Release NotesUser's image

    If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

    If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

    1 person found this answer helpful.
  2. Clive Watson 5,716 Reputation points MVP
    2023-10-31T09:07:47.59+00:00

    Please try again, I have checked 5 workspaces in three regions and they all have this in Content hub. If its still not there it maybe a region issue or the ones I've checked haven't got the changes you have yet?

  3. JamesTran-MSFT 36,371 Reputation points Microsoft Employee
    2023-10-31T17:43:09.8833333+00:00

    @Courtney Cowling - ParaFlare

    Thank you for your post!

    I understand you aren't able to find the Azure Active Directory data connector within the Microsoft Sentinel Content Hub, even after filtering and refining your search. However, adding to what was shared by Clive Watson, if you don't see the Azure AD connector, can you clear all your filters and retry your search for the connector from the Content Hub.

    Enable a data connector:

    1. Navigate to Microsoft Sentinel
    2. Select Content Hub under Content Management
    3. Search for and select Azure Active Directory

    User's image

    • If you're still having issues, can you share a screenshot of what you're seeing so I can gain a better understanding of your issue?

    I hope this helps!

    If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

    If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

  4. Courtney Cowling - ParaFlare 0 Reputation points
    2023-11-01T02:49:38.2766667+00:00

    For anyone following along, Microsoft has resolved this and it's now showing again in the portal as normal - one of those monthly bugs :)