---
title: Install the application and configure Microsoft Defender for Endpoint integration
description: Install and configure the Microsoft Defender for Endpoint integration from the ServiceNow Store on your ServiceNow AI Platform instance. Start creating capability profiles using the configurations.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/install-microsoft-defender-source.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Microsoft Defender for Endpoint integration, Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Install the application and configure Microsoft Defender for Endpoint integration

Install and configure the Microsoft Defender for Endpoint integration from the ServiceNow Store on your ServiceNow AI Platform instance. Start creating capability profiles using the configurations.

## Before you begin

Role required: sn\_si.admin

## Procedure

1.  Download the Microsoft Defender for Endpoint integration from the ServiceNow Store and install it.

2.  Navigate to **Security Operations** > **Integrations** > **Integration Configurations**.

3.  Search for the Microsoft Defender for Endpoint tile, and click **Configure**.

4.  On the form, fill in the following fields.

    | | |
    |---|---|
    |Name|Name for the Microsoft Defender for Endpoint instance configuration.|
    |Base URL|The service base URL for Microsoft Defender for Endpoint|
    |Tenant ID|The Microsoft Defender for Endpoint Tenant ID. All actions would be performed on this instance.|
    |Client ID|Client ID for the application that you have registered in the Microsoft Azure portal.|
    |Client Secret|Client secret for your registered application.|

5.  Select **Submit**.

    \[Omitted image "ms\_defender\_tile.png"\] Alt text: Install the application and configure a source for the integration


## Result

The Microsoft Defender for Endpoint configurations list is displayed with your new configuration record. You have completed the configuration for the Microsoft Defender for Endpoint.