Skip to content
Data Loss Prevention Incident Response with Microsoft › Integrate › Data Loss Prevention Incident Response › Security Operations
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Install and configure the Microsoft DLP integration

Install and configure the  DLP Incident Response integration with Microsoft DLP from the  ServiceNow® Store on your  ServiceNow AI Platform instance. Start investigating DLP incidents using the  Microsoft DLP event data.

Before you begin

Role required: sn_dlir.admin

Procedure

  1. Download and install the  Microsoft DLP integration from the  ServiceNow® Store.

  2. Navigate to Security Operations > Integrations ** > Integration Configurations**.

  3. Configure the Microsoft DLP integration.

    1. Search for DLP Incident Response Integration with Microsoft tile and select  Configure.
Image omitted: dlp-microsoft.png
Click Configure for Microsoft.
2.  On the form, fill in the fields.

    |Field|Description|
    |-----|-----------|
    |Name|Name of the Microsoft DLP integration configuration.|
    |Client ID|Client ID of the app created on Microsoft Azure portal.|
    |Client Secret|Client Secret of the app created on Microsoft Azure portal.|
    |Tenant ID|Tenant ID of the user.|

3.  Select **Submit**.

After you successfully validate and submit the configuration, the Microsoft DLP Integration is saved on the Security Integrations page as a tile.

  1. Update the Azure Storage Configuration.

    1. In the Security Integrations page, search for Azure Storage Configuration tile.

    2. In the Azure Storage Configuration tile, select Update.

Image omitted: dlp-microsoft-azure-storage.png
Click Update for Azure Storage Configuration.
3.  On the form, fill in the fields.

    |Field|Description|
    |-----|-----------|
    |Name|Name of the Azure Storage configuration.|
    |Storage Account Name|Storage account name created on Azure portal|
    |Container Name|Container name created in storage account on Azure portal.|
    |Shared Access Key|Shared access key for the Storage account.|

4.  Select **Submit**.

After you successfully validate and submit the configuration, the Azure Storage Configuration is saved on the Security Integrations page as a tile.

  1. Update the AWS Storage Configuration.

    1. In the Security Integrations page, search for AWS Storage Configuration tile.

    2. In the AWS Storage Configuration tile, select Update.

Image omitted: dlp-microsoft-aws-storage.png
Click Update for AWS Storage Configuration.
3.  On the form, fill in the fields.

    |Field|Description|
    |-----|-----------|
    |Name|Name of the AWS Storage configuration.|
    |Region Name|Region name of the AWS Storage account.|
    |Bucket Name|Bucket name created on the AWS portal.|
    |Access Key|Access key with read, write, and delete access.|
    |Secret Key|Shared key with read, write, and delete access|

4.  Select **Submit**.

Result

After you successfully validate and submit the configuration, the AWS S3 Configuration is saved on the Security Integrations page as a tile.

Parent Topic:Data Loss Prevention Incident Response with Microsoft