Office Software (SaaS) and IAM
The Office Software (SaaS) and IAM category of the Application Catalog holds 9 application templates. Choosing Office Software (SaaS) and IAM in the catalog's category drop-down shows only these:
| Template | Card description | Template ID |
|---|---|---|
| Cisco Duo Admin API | Cisco Duo Events via Admin API integration | Duo |
| Google Workspace | Google Workspace (G-Suite) audit via Google Project | GoogleWorkspace |
| Google Workspace (OAuth) | Google Workspace (G-Suite) audit via OAuth | GSuite |
| Google Workspace Resources | Google Workspace Resource Dump add-on | GoogleWorkspaceResource |
| Microsoft 365 Activity Log | Exchange, SharePoint, OneDrive, Teams and DLP activity from the Microsoft 365 unified audit log (formerly Office 365). Carries only the M365 copy of sign-ins; for Entra ID sign-in and directory audit logs add Microsoft Entra ID Logs. Admin consent or your own app registration. | Office365 |
| Microsoft 365 Bundle (Activity, Entra ID, Inventory) | One app registration with a client secret installs Microsoft 365 Activity Log, Microsoft Entra ID Logs (Graph API) and Microsoft 365 Inventory together. Do not install those three separately as well. No admin-consent mode. | Office365Audit |
| Microsoft 365 Inventory (Users, Devices, Apps) | Periodic snapshot of tenant users, groups, devices, app registrations and Conditional Access policies into Resources. Not an event feed. Already included in the Microsoft 365 Bundle. | Office365ResourceWatch |
| Microsoft Entra ID Logs (Event Hubs) | The same Entra ID sign-in and audit logs, plus non-interactive, service-principal and managed-identity sign-ins, streamed by a diagnostic setting through Azure Event Hubs. No Entra app needed. | AzureAuditEventHub |
| Microsoft Entra ID Logs (Graph API) | Entra ID (formerly Azure AD) sign-in and directory audit logs polled from Microsoft Graph. Identity only; mail, file and Teams activity is in Microsoft 365 Activity Log. Admin consent or your own app registration. | AzureAudit |