SafeTitan

Follow the steps below to register the PhishHuk application in your Microsoft Azure App Registration portal.

1. First, navigate to your Azure portal .

2. Open Azure Active Directory, by selecting it on the left in the Navigation pane, or here.

3. Select App registrations > New registration.

4. In the Register an application window that opens, complete the following sections:

   • Name: Enter an identifiable name, such as: SafeTitan-PhishHuk-GraphApi.

   • Supported Account Types: Use the Default option, which is Accounts in this organizational directory only (Cyber Risk Aware Ltd only - Single Tenant).

   • Redirect URL (optional): Select Web from the dropdown menu, and then enter https://localhost/PhishHuk in the next field.

     Note

     Note that entering information here is optional but a value is required for authentication purposes. The Redirect URL can be changed later.

   

The steps below explain how to create an Application Secret. Your SafeTitan instance will use this value to prove its identity when connecting to Azure.

1. Select the Certificates & secrets tab.

   

2. On the next screen, select New client secret and add a description.

   

3. Select an expiration date and then select Add to create the client.

4. Once you've created the client, take note of the Client Secret Value, as you will need this when you configure permissions in the SafeTitan Portal.

Configure the permissions required by SafeTitan as follows:

1. From your Azure portal, select API permissions and then Add a Permission.

   

2. In the dialog that appears, select Microsoft APIs and then Microsoft Graph.

3. Under API Permissions add the following permissions:

   

4. Select Grant Admin Consent for permissions that require it.

Configure permission in the SafeTitan portal as follows:

1. In your SafeTitan portal, go to your PhishHuk menu (or SOARDPhish if enabled) and in the window that opens, select Settings > Graph API.

   

2. Using the toggle, turn on Use Graph API Connection.

   

3. Enter your Client ID value and your Client Secret in the appropriate fields. (Note that in Azure the Client Secret is referred to as Secret Value.)

4. Select Update.