#31521 Operational | P3 | Microsoft 365: Consent to Application Granted @ Blue Mountain Clinic

New-Blumira Created Jan 13, 2025, 5:37 PM

System (internal) Jan 13, 2025, 5:37 PM

Created from Lead: https://artichoke.shield.syncromsp.com/leads/29868138/convert

Check-in (internal) Jan 13, 2025, 5:37 PM

[embedded image](https://www.blumira.com/)

Operational | P3 | Microsoft 365: Consent to Application Granted @ Blue Mountain Clinic

Blumira has detected Microsoft 365: Consent to Application Granted for Blue Mountain Clinic on 2025-01-13 10:13AM MST and triggered action Create Informational Finding for Responders.

Analysis:

User [email protected] has granted the application "MS SSO Blumira Prod" consent to access data in your organization's Microsoft 365 tenant. Only approved applications with a legitimate business use case should have permissions to access sensitive data like contact information, email, or documents. Unexpected 'Consent to Application' activity to an unapproved application may indicate successful consent phishing by a threat actor.

For more information about Microsoft 365 Consent Phishing, see the Microsoft documentation: [Protect against consent phishing](https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/protect-against-consent-phishing?source=recommendations).

Finding ID: F-25-02-4D83

Finding Data Source: Microsoft365 Azure AD
Replying to this email does not open a ticket or notify the support team. Please email [email protected] or comment within the Finding.

[Learn More](https://app.blumira.com/120413f6-dfa7-4ba7-8964-11dd90ed9bf2/query/findings/4d835e43-9aee-4a5e-ba20-67a09c5fa854)

[embedded image]

[email protected]
[206 E. Huron Street, Suite 106, Ann Arbor, MI 48104](#)

fcd90d6a-788d-40f9-8a4a-5c6e9107e383

[embedded image]

Ticket Automation (internal) Jan 13, 2025, 5:37 PM

Automation Blumira ran on this ticket. Actions: Change Status to New-Blumira