Skip to content

Commit fe410ef

Browse files
authored
Update README.md
1 parent 53c91c3 commit fe410ef

File tree

1 file changed

+44
-22
lines changed

1 file changed

+44
-22
lines changed

README.md

Lines changed: 44 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -6,9 +6,10 @@ The Microsoft Entra Special Agent can be integrated into Checkmk 2.3 or newer.
66
You can download the .mkp file from releases in this repository to upload it directly to your Checkmk site.
77

88
The Plugin provides monitoring of these components:
9-
- Microsoft Entra connect/cloud sync
10-
- Microsoft Entra app registration credentials
11-
- Microsoft Entra SAML certificates
9+
- Microsoft Entra App Registration Credentials
10+
- Microsoft Entra CA VPN Certificate
11+
- Microsoft Entra Connect/Cloud Sync
12+
- Microsoft Entra SAML Certificates
1213

1314
## Prerequisites
1415

@@ -26,54 +27,75 @@ You will need the Microsoft Entra Tenant ID, the Microsoft Entra App Registratio
2627
When you configure the Special Agent, you have the option to select only the services that you want to monitor. You do not have to implement all the checks, but at least one of them.
2728

2829
## Check Details
29-
### Microsoft Entra connect/cloud sync
30+
31+
### Microsoft Entra App Registration Credentials
3032

3133
#### Description
3234

33-
This check monitors the time since the last Entra connect/cloud synchronisation.
35+
This check monitors the expiration time of secrets and certificates from Entra app registrations.
3436

35-
#### Checkmk service example
37+
#### Checkmk Service Example
3638

37-
![grafik](https://github.com/user-attachments/assets/4194feb8-abf9-434d-ba53-ea367e9f9c51)
39+
![grafik](https://github.com/user-attachments/assets/72493199-730c-4dbf-8d4d-d09e8e343ff4)
3840

3941
#### Checkmk Parameters
4042

41-
1. **Time since last sync**: Specify the upper levels for the last sync time from Microsoft Entra connect/cloud sync. The default values are 1 hour (WARN) and 3 hours (CRIT). To ignore the last sync time, select 'No levels'.
43+
1. **Credential Expiration**: Specify the lower levels for the Microsoft Entra app credential expiration time. The default values are 14 days (WARN) and 5 days (CRIT). To ignore the credential expiration, select 'No levels'.
44+
2. **Exclude Credentials**: Specify a list of credential descriptions that you do not want to monitor.
4245

4346
#### Microsoft Graph API
4447

45-
**API permissions**: At least *Organization.Read.All* (Application permission)
46-
47-
**Endpoint**: *https://graph.microsoft.com/v1.0/organization/{organizationId}*
48+
**API Permissions**: At least *Application.Read.All* (Application permission)
4849

49-
### Microsoft Entra app registration credentials
50+
**Endpoint**: *https://graph.microsoft.com/v1.0/applications*
51+
<br><br>
52+
### Microsoft Entra CA VPN Certificates
5053

5154
#### Description
5255

53-
This check monitors the expiration time of secrets and certificates from Entra app registrations.
56+
This check monitors the expiration time of the Entra Conditional Access VPN certificate.
5457

55-
#### Checkmk service example
58+
#### Checkmk Service Example
5659

57-
![grafik](https://github.com/user-attachments/assets/72493199-730c-4dbf-8d4d-d09e8e343ff4)
60+
![grafik](https://github.com/user-attachments/assets/535a3a57-1290-4c17-b567-a34c7c5d8bd3)
5861

5962
#### Checkmk Parameters
6063

61-
1. **Credential expiration**: Specify the lower levels for the Microsoft Entra app credential expiration time. The default values are 14 days (WARN) and 5 days (CRIT). To ignore the credential expiration, select 'No levels'.
62-
2. **Exclude credentials**: Specify a list of credential descriptions that you do not want to monitor.
64+
1. **Certificate Expiration**: Specify the lower levels for the Microsoft Entra Conditional Access VPN certificate expiration time. The default values are 14 days (WARN) and 5 days (CRIT). To ignore the certificate expiration, select 'No levels'.
6365

6466
#### Microsoft Graph API
6567

66-
**API permissions**: At least *Application.Read.All* (Application permission)
68+
**API Permissions**: At least *Application.Read.All* (Application permission)
6769

68-
**Endpoint**: *https://graph.microsoft.com/v1.0/applications*
70+
**Endpoint**: *https://graph.microsoft.com/v1.0/servicePrincipals*
71+
<br><br>
72+
### Microsoft Entra Connect/Cloud Sync
73+
74+
#### Description
6975

70-
### Microsoft Entra SAML certificates
76+
This check monitors the time since the last Entra Connect/Cloud Sync synchronisation.
77+
78+
#### Checkmk Service Example
79+
80+
![grafik](https://github.com/user-attachments/assets/4194feb8-abf9-434d-ba53-ea367e9f9c51)
81+
82+
#### Checkmk Parameters
83+
84+
1. **Time since last sync**: Specify the upper levels for the last sync time from Microsoft Entra Connect/Cloud Sync. The default values are 1 hour (WARN) and 3 hours (CRIT). To ignore the last sync time, select 'No levels'.
85+
86+
#### Microsoft Graph API
87+
88+
**API Permissions**: At least *Organization.Read.All* (Application permission)
89+
90+
**Endpoint**: *https://graph.microsoft.com/v1.0/organization/{organizationId}*
91+
<br><br>
92+
### Microsoft Entra SAML Certificates
7193

7294
#### Description
7395

7496
This check monitors the expiration time of certificates from Entra enterprise applications with SAML SSO configured.
7597

76-
#### Checkmk service example
98+
#### Checkmk Service Example
7799

78100
![grafik](https://github.com/user-attachments/assets/86863d2c-009b-465b-915e-3a1a25922892)
79101

@@ -83,7 +105,7 @@ This check monitors the expiration time of certificates from Entra enterprise ap
83105

84106
#### Microsoft Graph API
85107

86-
**API permissions**: At least *Application.Read.All* (Application permission)
108+
**API Permissions**: At least *Application.Read.All* (Application permission)
87109

88110
**Endpoint**: *https://graph.microsoft.com/beta/servicePrincipals*
89111

0 commit comments

Comments
 (0)