---
title: Sumo Logic Notifications By Microsoft
description: ''
slug: /help/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-microsoft/
canonical: https://www.sumologic.com/help/docs/platform-services/automation-service/app-central/integrations/sumo-logic-notifications-by-microsoft/
---
import useBaseUrl from '@docusaurus/useBaseUrl';
})
***Version: 1.1
Updated: April 30, 2026***
Integration with Sumo Logic platform for monitors and Microsoft (Outlook) notification.
## Actions
* **Assess Alert Status** (*Scheduled*) - Periodically monitor status of a Sumo Logic alert and notify a Outlook user about an unresolved alert.
## Sumo Logic Notifications By Microsoft configuration
### Register an application
Registering your application establishes a trust relationship between your app and the Microsoft identity platform. The trust is unidirectional: your app trusts the Microsoft identity platform, and not the other way around.
Follow these steps to create the app registration:
1. Sign in to the [Azure portal](https://portal.azure.com/).
2. If you have access to multiple tenants, use the Directory + subscription filter
})
in the top menu to select the tenant in which you want to register an application.
3. Search for and select the **Azure Active Directory**.
4. Under **Manage**, select **App registrations > New registration**.
5. Enter a Name for your application. Users of your app might see this name, and you can change it later.
6. Select **Register** to complete the initial app registration.
7. Don't enter anything for **Redirect URI (optional)**.
})
When registration completes, the Azure portal displays the app registration's Overview pane, which includes its Application (client) ID. Also referred to as just client ID, this value uniquely identifies your application in the Microsoft identity platform.
The client ID as one aspect in validating the security tokens it receives from the identity platform.
})
### Add credentials
Credentials are used by confidential client applications that access an API. Examples of confidential clients are web apps, or service- and daemon-type applications. Credentials allow your application to authenticate as itself, requiring no interaction from a user at runtime.
You can add client secrets (a string) as credentials to your confidential client app registration.
})
### Add a client secret
The client secret, known also as an application password, is a string value of your app.
1. Select your application in **App registrations** in the Azure portal.
2. Select **Certificates & secrets > New client secret**.
3. Add a description for your client secret.
4. Select a duration.
5. Click **Add**.
6. Record the secret's value for use in your client application code - it's never displayed again after you leave this page.
### Add permissions to API
1. Select your application in **App registrations** in the Azure portal.
2. Select **API permissions > Add a permission**.
3. Delegated permissions are selected by default. Delegated permissions are appropriate for client apps that access an API as the signed-in user, and whose access should be restricted to the permissions you select in the next step.
4. Application permissions are for service- or daemon-type applications that need to access API as themselves, without user interaction for sign-in or consent. Unless you've defined application roles for your API.
5. Select **Add a permission**, and add the following permissions (as shown in the screenshot).
})
#### EWS API to be configured for these permissions
Applications are authorized to call APIs when they are granted permissions by users/admins as part of the consent process. The list of configured permissions should include all the permissions the application needs.
**API / Permissions**
Microsoft Graph (7)
* Mail.Read
+ Type: Delegated
+ Description: Read user mail
+ Admin: -
* Mail.Read
+ Type: Application
+ Description: Read mail in all mailboxes
+ Admin: Yes
* Mail.Send
+ Type: Delegated
+ Description: Send mail as a user
+ Admin: Yes
* Mail.Send
+ Type: Application
+ Description: Send mail as any user
+ Admin: Yes
* User.ReadBasic.All
+ Type: Delegated
+ Description: Read basic profiles of all users
+ Admin: Yes
* User.ReadBasic.All
+ Type: Application
+ Description: Read basic profiles of all users
+ Admin: Yes
## Create an access key in Sumo Logic
1. In the main Sumo Logic menu, select your username and then **Preferences**.
2. From the preferences screen, in the section **My Access Keys**, click **Add Access Key**.
})
3. Populate the name and click **Create Key**.
})
4. Copy the **Access ID** and **Access Key** and store them (temporally) into a text editor.
:::note
They won't be available again once you close this screen.
:::
5. Click **Done** after you copied the Access ID and Access Key.
})
## Configure Sumo Logic Notifications by Microsoft in Automation Service and Cloud SOAR
import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
import IntegrationCertificate from '../../../../reuse/automation-service/integration-certificate.md';
import IntegrationEngine from '../../../../reuse/automation-service/integration-engine.md';
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';
import SumoLogicAPIURL from '../../../../reuse/automation-service/sumo-logic-api-url.md';
import CloudSOARAPIURL from '../../../../reuse/automation-service/cloud-soar-api-url.md';
import AccessID from '../../../../reuse/automation-service/access-id.md';
import AccessKey from '../../../../reuse/automation-service/access-key.md';
*
* **API URL**. Enter your API URL for Microsoft, for example, `https://graph.microsoft.com/v1.0`.
* **Authentication Grant Type**. Choose one of the following according to the permissions you add to your app:
* **Password (Delegated Context)**
* **Client Credentials (Application Context)**
* **Directory (Tenant) ID**. Enter the [tenant ID](https://learn.microsoft.com/en-us/azure/healthcare-apis/register-application#application-id-client-id) of the AAD directory in which you created the application. (You can check from your [app registration page](https://learn.microsoft.com/en-us/graph/auth-register-app-v2)).
* **Client ID**. Enter your application ID. (You can check from your [app registration page](https://learn.microsoft.com/en-us/graph/auth-register-app-v2)). This is required for both authentication grant types.
* **Client Secret**. Enter your client secret. This is required for both authentication grant types.
* **Username**. Enter the username of an admin user authorized to authenticate the integration. This is required only if you set the authentication grant type as **Password (Delegated Context)**. Leave this field empty if you set the authentication grant type as **Client Credentials (Application Context)**.
* **Password**. Enter the password for the admin user. This is required only if you set the authentication grant type as **Password (Delegated Context)**. Leave this field empty if you set the authentication grant type as **Client Credentials (Application Context)**.
*
*
*
*
*
*
*
})
## Change Log
* December 04, 2024 - First upload
* April 30, 2026 (v1.1) - Upgraded the `python3_generic` Docker image (Python 3.8) to `python3_12_generic` (Python 3.12) to address Python 3.8 end-of-life and improve security and performance.