SecurityInsight settings · Settings > Sign-in & Azure resources
Sign-in method
| Key | SI_AuthMethod |
|---|---|
| Where | Settings > Sign-in & Azure resources > How SecurityInsight signs in |
| Type | Text |
| Default | Keeps a configured service principal; otherwise the host's managed identity |
| Edition | Community |
What it does
Chooses how SecurityInsight signs in to Microsoft services: managed identity, service principal with certificate, or service principal with client secret.
When set
Decides which identity every engine uses, and therefore which permissions must be granted. An unknown value stops the run with an error. Choosing a service principal switches managed-identity sign-in off.
When blank or default
Left blank, the default applies: Keeps a configured service principal; otherwise the host's managed identity
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Set during setup. Change when moving between managed identity and a service principal.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack