topic Custom APP-ID for more granular access to MS Office online components in Custom Signatures

topic Custom APP-ID for more granular access to MS Office online components in Custom Signatures https://live.paloaltonetworks.com/t5/custom-signatures/custom-app-id-for-more-granular-access-to-ms-office-online/m-p/206382#M236 <P>I would like to have more granular control over access to Microsoft online resources, specifically Visual Studio tools. Access to the site currently is identified as 'ms-office365-base' but I would like to specifically identify the logon page and resources under 'visualstudio,com' as a separate app from 'ms-office365-base' so that I can allow access to this resource only. I have created a custom APP id and specified pattern matches 'http-req-host-header' as 'login\.microsoftonline\.com' AND 'http-req-message-body' as 'visualstudio\.com', which was captured in the Firefox request for URL: <A href="https://login.microsoftonline.com/common/oauth2/authorize?client_id=499b84ac-1321-427f-aa17-267ca6975798&site_id=501454&response_mode=form_post&response_type=code+id_token&redirect_uri=https%3A%2F%2Fapp.vssps.visualstudio.com%2F_signedin&nonce=0d79a0de-34c0-48d6-9fc7-ca304398cf9a&state=realm%3Dmy.visualstudio.com%26reply_to%3Dhttps%253A%252F%252Fmy.visualstudio.com%252FBenefits%253Fwt.mc_id%253Do~msft~vscom~nav%2526campaign%253Do~msft~vscom~nav%26ht%3D3%26nonce%3D0d79a0de-34c0-48d6-9fc7-ca304398cf9a&resource=https%3A%2F%2Fmanagement.core.windows.net%2F&cid=0d79a0de-34c0-48d6-9fc7-ca304398cf9a&wsucxt=1" target="_blank">https://login.microsoftonline.com/common/oauth2/authorize?client_id=499b84ac-1321-427f-aa17-267ca6975798&site_id=501454&response_mode=form_post&response_type=code+id_token&redirect_uri=https%3A%2F%2Fapp.vssps.visualstudio.com%2F_signedin&nonce=0d79a0de-34c0-48d6-9fc7-ca304398cf9a&state=realm%3Dmy.visualstudio.com%26reply_to%3Dhttps%253A%252F%252Fmy.visualstudio.com%252FBenefits%253Fwt.mc_id%253Do~msft~vscom~nav%2526campaign%253Do~msft~vscom~nav%26ht%3D3%26nonce%3D0d79a0de-34c0-48d6-9fc7-ca304398cf9a&resource=https%3A%2F%2Fmanagement.core.windows.net%2F&cid=0d79a0de-34c0-48d6-9fc7-ca304398cf9a&wsucxt=1</A> The access is still being identified as 'ms-office365-base', and I would like access to this page be identified as my custom app 'ms-visualstudio-online' Can you help?</P> Mon, 19 Mar 2018 16:08:12 GMT kstiver 2018-03-19T16:08:12Z Custom APP-ID for more granular access to MS Office online components https://live.paloaltonetworks.com/t5/custom-signatures/custom-app-id-for-more-granular-access-to-ms-office-online/m-p/206382#M236 <P>I would like to have more granular control over access to Microsoft online resources, specifically Visual Studio tools. Access to the site currently is identified as 'ms-office365-base' but I would like to specifically identify the logon page and resources under 'visualstudio,com' as a separate app from 'ms-office365-base' so that I can allow access to this resource only. I have created a custom APP id and specified pattern matches 'http-req-host-header' as 'login\.microsoftonline\.com' AND 'http-req-message-body' as 'visualstudio\.com', which was captured in the Firefox request for URL: <A href="https://login.microsoftonline.com/common/oauth2/authorize?client_id=499b84ac-1321-427f-aa17-267ca6975798&site_id=501454&response_mode=form_post&response_type=code+id_token&redirect_uri=https%3A%2F%2Fapp.vssps.visualstudio.com%2F_signedin&nonce=0d79a0de-34c0-48d6-9fc7-ca304398cf9a&state=realm%3Dmy.visualstudio.com%26reply_to%3Dhttps%253A%252F%252Fmy.visualstudio.com%252FBenefits%253Fwt.mc_id%253Do~msft~vscom~nav%2526campaign%253Do~msft~vscom~nav%26ht%3D3%26nonce%3D0d79a0de-34c0-48d6-9fc7-ca304398cf9a&resource=https%3A%2F%2Fmanagement.core.windows.net%2F&cid=0d79a0de-34c0-48d6-9fc7-ca304398cf9a&wsucxt=1" target="_blank">https://login.microsoftonline.com/common/oauth2/authorize?client_id=499b84ac-1321-427f-aa17-267ca6975798&site_id=501454&response_mode=form_post&response_type=code+id_token&redirect_uri=https%3A%2F%2Fapp.vssps.visualstudio.com%2F_signedin&nonce=0d79a0de-34c0-48d6-9fc7-ca304398cf9a&state=realm%3Dmy.visualstudio.com%26reply_to%3Dhttps%253A%252F%252Fmy.visualstudio.com%252FBenefits%253Fwt.mc_id%253Do~msft~vscom~nav%2526campaign%253Do~msft~vscom~nav%26ht%3D3%26nonce%3D0d79a0de-34c0-48d6-9fc7-ca304398cf9a&resource=https%3A%2F%2Fmanagement.core.windows.net%2F&cid=0d79a0de-34c0-48d6-9fc7-ca304398cf9a&wsucxt=1</A> The access is still being identified as 'ms-office365-base', and I would like access to this page be identified as my custom app 'ms-visualstudio-online' Can you help?</P> Mon, 19 Mar 2018 16:08:12 GMT https://live.paloaltonetworks.com/t5/custom-signatures/custom-app-id-for-more-granular-access-to-ms-office-online/m-p/206382#M236 kstiver 2018-03-19T16:08:12Z