Bring Microsoft 365 sign‑in events into Viio to uncover which SaaS tools employees access with corporate credentials. The connection is read‑only and takes only minutes to configure.
Capabilities
Capability | What it means in Viio |
✅ Usage | Timestamped record of every Microsoft SSO sign‑in. |
✅ Users | Matches each sign‑in to the employee account (userPrincipalName). |
Prerequisites
Entra ID Premium P1 (or higher) licence – required to query audit log data via Microsoft Graph.
Global or Security Reader admin rights for consent.
Setup
Open Viio → Integrations and choose Microsoft SSO Logs.
Click Connect to Microsoft. You will be redirected to Entra ID.
Sign in with a Global admin (or delegated permission administrator).
Review the read‑only scopes and click Accept.
Back in Viio, name the integration (e.g. “Acme – SSO Logs”) and click Save.
The first synchronisation begins immediately; allow up to 30 minutes for data to appear.
Troubleshooting & FAQ
Issue | Quick fix |
“Insufficient licence” error | Confirm the tenant holds at least one Entra ID P1 licence. |
No sign‑ins visible after one hour | Check that AuditLog.Read.All consent is still granted in Entra ID → Enterprise Applications → Viio. |
Need historical data beyond 30 days | Microsoft retains sign‑in logs for 30 days on P1; upgrade to P2 or export to Log Analytics for longer retention. |
Technical details
Auth method: Microsoft Graph OAuth 2.0 app consent.
Endpoints called:
GET /auditLogs/signInsandGET /directory/objects/{id}.Permissions requested:
AuditLog.Read.AllDirectory.Read.All
Fields stored:
id,createdDateTime,userId,userPrincipalName,appDisplayName.Data flow: One‑way, read‑only from Microsoft 365 → Viio; no data is written back to Microsoft.
SSO logs get fetched historically for 3 months. If a week after initial integration you do not see any data flowing into Viio, please reach out to [email protected]