Integrating Microsoft Defender for Identity with Secret Server

Integrating the Delinea Secret Server with Microsoft Defender for Identity fortifies customer security posture, enhances threat detection, and ensures comprehensive monitoring across the given network in one centralized place. Combining these tools provides a more thorough defense against identity threats. Microsoft Defender for Identity helps identify suspicious activity involving Delinea Vaulted Accounts, allowing for quicker mitigation through Delinea, such as triggering a Remote Password Change for compromised privileged accounts.

The key features of the Delinea integration with Microsoft Defender for Identity are:

  • The Secret Server sends vaulted EntraID and on-premises Active Directory identities to Microsoft Defender for Identity. The Microsoft Defender for Identity dashboard tags them as "Managed Account (Delinea)".

  • The Microsoft Defender for Identity interface allows you to initiate password rotation directly for accounts tagged as managed by Delinea.

  • Upon request from the Microsoft Defender for Identity Console, the Delinea Secret Server will rotate the compromised password and return a confirmation once it has been completed.