With our Office 365 integration, you can attach evidence directly from your Office 365 account. Collecting evidence attachments directly from Microsoft's online suite of Office tools means greater efficiency (one less step in collecting evidence) and data security (no need to download semi-sensitive files onto your desktop before uploading).

The Office 365 integration connects your Microsoft account to Strike Graph, allowing you or your teammates to pull files from SharePoint and OneDrive directly into your evidence library. Once configured, you can target a specific file or pull the most recently modified file from a folder — both options are compatible with Automated Collection for ongoing compliance monitoring.

Many organizations use cloud-based documentation solutions like Office 365 to create and maintain policies, procedures, and other operational records. A few common examples:

Using a centralized location like Office 365 for storing policies can help create a strong and transparent compliance program within your organization, and pairs particularly well with our Automated Collection feature.

Follow the instructions on this page to get started collecting evidence from Office 365.

The Office 365 integration connects to your personal Microsoft account. Each user who would like to collect evidence from Office 365 will need to configure the integration for themselves — unless another team member has already connected and shared their integration with the organization (see Sharing your integration with your organization below).

Note: If you do not see the Integrations Manager in your main navigation, you may not have access to this feature. Please contact your Customer Success Manager for more information.

I

f your configuration was successful, you should see your account listed in the Office 365 integration card with an Active status.

Each user within your organization who would like to use the Office 365 integration to collect evidence will need to authorize access from the Integrations Manager screen — unless an existing integration has been shared with the organization (see below).

Each user within your organization who would like to use the Office 365 integration to collect evidence will need to authorize access from the Integrations Manager screen.

Once you have an active Office 365 integration (either your own or one shared with your organization), you can collect evidence in one of two ways: collect a specific file, or collect the most recently modified file from a folder.

If you have a specific file to collect, or plan to continuously update one document (like a published internal policy), you can supply the share link for evidence collection. This can be configured for a one-time collection, or recurring collection using Automated Evidence Collection.

For the integration to effectively fetch the document, the share URL does not need to be public or allow editing, but must at least allow people within your organization to access and download the document.

You can also specify a folder to collect from, and the integration will attach the most recently modified file from that folder. This is useful in situations where you need to create new files for content revisions or updates, if you have folder repositories where sample evidence is collected internally, or to enable other bespoke automations that can be enabled via SharePoint folders.

Evidence collection from a folder can be configured for a one-time collection, or recurring collection using Automated Evidence Collection.

For the integration to effectively fetch the file from that folder, the share URL does not need to be public or allow editing, but must at least allow people within your organization to access and download content from the folder.

By default, each user's Office 365 connection is private to them — only they can use it to collect evidence. However, the integration owner can choose to share their connection with the entire organization, allowing all team members in your Strike Graph account to use it for evidence collection without needing to set up their own.

This is particularly helpful for organizations where:

To share your integration:

Once shared, a Shared badge will appear on your integration in the list, and all users in your organization will be able to select it when attaching evidence.

To unshare:

Follow the same steps above and select Unshare from organization from the kebab menu.

Note: Only the owner of the integration (the user who originally connected it) can share or unshare it. The share/unshare option will only appear when the integration has an Active status.

You can remove the integration at any time. Please note that removing an integration does not delete any files that were attached used during that integration. Removing an integration may also disrupt automated collection.

To remove:

Note: You may have access to remove integrations for other users on your team.

With Automated Collection, Strike Graph can recollect evidence attachments from Office 365 on a regular schedule so that you can monitor your control environment and ensure that your evidence remains in an effective 'audit-ready' state. More information is available here about configuring Automated Collection for your evidence.

You can remove the integration at any time. Please note that removing an integration does not delete any files that were previously attached using that integration. Removing an integration may also disrupt automated collection.

To remove:

Note: You may have access to remove integrations for other users on your team.

If you're having trouble with the Office 365 integration, check below for troubleshooting tips. If your issue is not resolved, send us a message via the in-app chat and we'll help you get it sorted.

If your organization requires admin consent to connect with third-party applications, you'll need to follow these instructions:

If multi-factor or two-factor authentication (MFA/2FA) was added to your Microsoft account after you connected it to Strike Graph, we will likely be unable to refresh your authentication tokens automatically. If you have automated collection configured with your Office 365 integration, you may receive an email when the next scheduled collection fails.

To resolve this issue, navigate to the Integrations Manager, open the Office 365 integration card, and locate your Microsoft account. Click the Reconnect button to reauthorize the integration. By reauthorizing, we will be able to resume automatic token rotations to keep your integration operating smoothly.

Once reconnected, you will be able to continue to use your Office 365 integration as expected, including scheduling automated collections.

The Office 365 integration works best in Chrome, but is also supported in Safari, Firefox, and Microsoft Edge. Browser-specific privacy settings can sometimes interrupt calls between Strike Graph and Office 365. See the notes below for settings to check if you experience problems.

Safari privacy settings known to impact Office 365 functionality: