Azure AD No LDAP

InsightIDR
1

A question as much for the InsightIDR team as well as other users.

We’re in the process of removing all on-premise AD with users and computers authenticating to cloud only Azure AD. Without LDAP as an option, I am not sure how we actually get user attribution in InsightIDR. All the logs and info are there, but our user count shows as 0.

By connecting our Office365 tenancy we get all of our Azure AD ingress logs and a huge amount of information - however we lose user attribution in InsightIDR.

  1. Is anyone else in this situation and how are you managing it?

  2. Does the Rapid7 team have a plan to support this without LDAP? E.g. can’t this info be retrieved using MS Graph API the way many other applications do it?

2

Bump,
Really curious as well.
Hope there is something on the roadmap as you mentioned to access this data trough MS Graph API.

1 Like