Adding a Microsoft Identity Protection Account

To provision a Microsoft Identity Protection account, make sure you meet the following requirements:

  • You have provisioned one or more Office 365 services for your organization

  • Your organization has an Azure AD Premium P1 or Premium P2 license

The steps outlined below detail how to provision an account for Microsoft Identity Protection from Administration.

  1. Log on to the Cloud App Security management console.
  2. Choose Administration > Service Account.
  3. Click Add, hover over your organization, and click Microsoft Identity Protection.
  4. Grant Cloud App Security the permission to access Microsoft Identity Protection.
    1. Click Click here at the end of step 1.
    2. On the Microsoft logon screen that appears, specify your Office 365 Global Administrator credentials and click Sign in.

      Make sure the Office 365 Global Adminstrator is the same as or in the same Microsoft tenant as the one used in provisioning Office 365 services for the organization.

    3. On the Exchange Online authorization screen that appears, click Accept to grant Cloud App Security the permission.
  5. Go back to the management console as instructed and click Done.
  6. Hover over the notification icon in the upper-right corner of the management console.

    If the message "You have provisioned for Microsoft Identity Protection." appears on the Notifications screen, the provisioning is successful.