Start with OAuth
IT & Security

Microsoft Defender OAuth Integration

Connect Microsoft Defender to your application without building and maintaining the OAuth flow.

Microsoft Defender is Microsoft's threat protection platform. Each user connects their own Microsoft Defender account through your OAuth app. Pathfix manages the authorization flow, stores and refreshes their tokens, and authenticates the requests your application makes to the Microsoft Defender API. What your integration does with that access is up to your code.

Start building with Pathfix Read the Pathfix docs

How Pathfix helps

  • 01

    OAuth authorization

    Pathfix runs the authorization flow with your Microsoft Defender OAuth app, so users approve access on Microsoft’s own consent screen.

  • 02

    Token management

    Each user’s access and refresh tokens are stored by Pathfix rather than in your application.

  • 03

    Token refresh

    Where Microsoft Defender issues refresh tokens, Pathfix refreshes them as they expire, so connections keep working after the first authorization.

  • 04

    Authenticated API passthrough

    Your application sends Microsoft Defender API requests through Pathfix, which adds the connected user’s credentials before passing them on to Microsoft Defender.

You own the Microsoft Defender OAuth application and its credentials, and your code implements the API logic.

Passthrough endpoint for Microsoft DefenderPOST https://labs.pathfix.com/oauth/method/microsoftdefender/call

How to get started

  1. 1

    Register your app with Microsoft

    Create an app in Microsoft’s developer settings to get a Client ID and Client Secret. When asked for a redirect URI, enter https://labs.pathfix.com/integrate/command.

  2. 2

    Add the credentials in Pathfix

    In your Pathfix account, add an application, select Microsoft Defender from the providers and enter the Client ID and Client Secret.

  3. 3

    Choose your scopes

    Add only the scopes your integration needs. Microsoft’s developer documentation lists what each scope allows.

  4. 4

    Test the connection

    Use Test Connection to connect an account in the API Playground and run a sample call.

  5. 5

    Let your users authorize

    Add the connect step to your app. Each user signs in to Microsoft Defender and approves the scopes you requested.

  6. 6

    Call the Microsoft Defender API

    Send requests through the Pathfix passthrough API using the provider reference microsoftdefender.

Documentation

More IT & Security integrations

Your Microsoft Defender OAuth app. Your users.

Start building with Pathfix Browse all integrations