This guide provides an overview of the "Azure AD for Nuclei Firehose" app that facilitates connectivity between Nuclei Firehose and Azure Active Directory. Azure AD connectivity enhances Nuclei Firehose with the following additional capabilities:
- Selective Capture (based on AD group membership)
- Selective Archiving (based on AD group membership)
- Extended Metadata Tagging (with AD user metadata)
The following prerequisites are required to enable successful deployment of the app:
- Azure Active Directory (cloud, or hybrid environment)
- Azure administrator rights with correct role assignments
Create a new App Registration
- Select "New registration"
- Configure app
- Name: "Azure AD for Nuclei Firehose"
- Supported Account Types: "Accounts in any organizational directory"
- Select "Register"
- Copy the "Application (client) ID" and the "Directory (tenant) ID"
Create Client Secret
- Select "Certificates & secrets", and then select "New client secret"
- Description: "Azure AD for Nuclei Firehose"
- Expires: "24 months"
- Copy the "Value" of the new Client secret
Configure API permissions
- Select "API permissions", and then select "Add a permission"
- Select "Microsoft Graph"
- Select "Application Permissions"
- Add the following app permissions below "Select permissions":
- Users: User.Read.All
- Groups: Group.Read.All
- GroupMember: GroupMember.Read.All
- Select "Add permissions"
- Select "Grant admin consent", and then select "Yes".
Submit Information to Nuclei
- Navigate to https://support.nuclei.ai/hc
- Select "Submit a request"
- Select: "Provisioning (Azure AD for Nuclei Firehose)"
- Complete all fields
- Application (client) ID (mandatory)
- Directory (tenant) ID (mandatory)
- Client Secret Value (mandatory)
- Select "Submit"
For support deploying Azure AD for Nuclei Firehose into your Azure environment, please contact Nuclei's support team at email@example.com.