With our Office 365 integration, you can attach evidence directly from your Office 365 account. Collecting evidence attachments directly from Microsoft's online suite of Office tools means greater efficiency (one less step in collecting evidence) and data security (no need to download semi-sensitive files onto your desktop before upload).

Jump to troubleshooting

Many organizations use cloud based documentation solutions like Office 365 to create and maintain evidence like policies, procedures, and other operational details.

Using a centralized location like Office 365 for storing policies can help create a strong and transparent compliance program within your organization, and pairs well with our Automated Collection feature.

Follow the instructions on this page to get started collecting evidence from Office 365.

This integration connects directly with your Office 365 account and each user who would like to collect evidence from Office 365 will need to configure the integration for themselves.

Note: If you do not see Integrations Manager in your main navigation, you may not have access to this feature. Please contact your customer success manager for more information.

If your configuration was successful, you should see your account listed in the Office 365 integration card.

Each user within your organization who would like to use the Office 365 integration to collect evidence will need to authorize access from the Integrations Manager screen.

Once you have activated an Office 365 integration for your account, you can use it to collect evidence in one of two ways: collect a specific file, or collect the most recently modified file from a folder.

If you have a specific file that you need to collect, or plan to continuously update one document (like a published internal policy), you can supply the share link for evidence collection. This can be configured for a one-time collection, or recurring collection using Automated Evidence Collection.

For the integration to effectively fetch the document, the shareURL does not need to be public or allow editing, but must at least allow people within your organization to access and download the document.

You can also specify a folder to collect from, and the integration will attach the most recently modified file from that folder. This could be useful in situations where you need to create new files for content revisions or updates, if you have folder repositories where sample evidence is collected internally, or to enable other bespoke automations that can be enabled via SharePoint folders.

Evidence collection from a folder can be configured for a one-time collection, or recurring collection using Automated Evidence Collection.

For the integration to effectively fetch the file from that folder, the share URL does not need to be public or allow editing, but must at least allow people within your organization to access and download content from the folder.

You can remove the integration at any time. Please note that removing an integration does not delete any files that were attached used during that integration. Removing an integration may also disrupt automated collection.

To remove:

Note: You may have access to remove integrations for other users on your team.

With Automated Collection, Strike Graph can recollect evidence attachments from Office365 on a regular schedule so that you can monitor your control environment and ensuring that your evidence remains in an effective 'audit-ready' state. More information is available here about configuring Automated Collection for your evidence.

If you're having trouble with the Office 365 integration, check below for troubleshooting tips. If your issue is not resolved by the advice below, send us a message.

If your organization requires admin consent to connect with third party applications, you'll need to follow these instructions:

If multi-factor or two-factor authentication (MFA/2FA) was added to your Microsoft account after you connected it to Strike Graph, it is likely that we will be unable to refresh your authentication tokens automatically. If you have automated collection configured with your O365 integration, you may receive an email when the next scheduled collection fails.

To resolve this issue, navigate back to the Integration Manager, open the Office365 integration card, and locate your Microsoft account. Click on the "Reconnect" button to reauthorize the integration. By reauthorizing the integration, we will be able to resume automatic token rotations to keep your integrations operating smoothly.

Once reconnected, you will be able to continue to use your Office365 integration was expected, including scheduling automated collections.

The Office 365 integration works best in Chrome, but is also supported in Safari, Firefox, and Microsoft Edge. Sometimes, browser-specific privacy settings can interrupt calls between Strike Graph and Office 365 and cause issues for users. See notes below for specific browser settings to check if you experience problems.

Reach out through our chat feature for real-time Customer Success support 8 am - 5 pm PT Monday through Friday.