Welcome to the Wiki of Compleye Online
MS365 integration security
Compleye Online offers an integration with Microsoft 365 (MS365). The integration is designed with a focus on security, leveraging a front-end integration approach that inherently reduces potential vulnerabilities. Here’s a brief explanation of the security benefits stemming from this architecture:
- By implementing the integration on the front-end, we limit the exposure of our back-end systems to direct interactions with MS365. This reduces the attack surface, making it more difficult for malicious actors to exploit vulnerabilities in our back-end infrastructure.
- The integration utilizes client-side authentication methods which allows users to authenticate directly with MS365. Authorization tokens thus granted are scope to the user’s permissions only, and are never sent, processed, or stored on our servers.
- Since the integration operates on the front-end, data exchanged with MS365 is handled directly in the user’s browser. This approach ensures that sensitive data is not transmitted to our back-end, reducing the risk of data breaches or leaks.
- With the integration primarily occurring on the front-end, compliance with data protection regulations becomes more straightforward. Since our back-end does not store or process MS365 data, we can more easily adhere to privacy standards and regulations.
- The front-end integration simplifies the architecture, reducing the complexity of managing secure connections and data flows between our platform and MS365. This simplicity contributes to a more robust security posture.
The integration’s emphasis on security and compliance is crucial for empowering your businesses to harness Microsoft 365’s capabilities while safeguarding sensitive data and fostering user trust in an increasingly digital landscape.
