Request for Microsoft Confirmation – DLP Integration with Third-Party Applications

Question

Request for Microsoft Confirmation – DLP Integration with Third-Party Applications

Ganesh Kitte 0

DLP and Third-Party Application Integration

The customer has a requirement to extend DLP controls to third-party applications such as:

Keka HR

Salesforce

Other third-party SaaS applications that may be introduced in the future

With the Microsoft 365 Business Premium licensing currently available, we understand that Microsoft Purview DLP can provide protection for supported Microsoft 365 workloads such as Exchange Online, Microsoft Teams, SharePoint Online, and OneDrive, including detection/blocking of sensitive information such as Aadhaar numbers.

However, we would like to confirm the options available for extending DLP controls to third-party SaaS applications.

Specifically, please confirm:

Can Microsoft Purview DLP with Microsoft 365 Business Premium provide DLP controls for applications such as Keka HR and Salesforce?

If not, can Microsoft Defender for Cloud Apps (CASB) be used to provide the required visibility and DLP controls for these third-party applications?

What additional Microsoft licensing or add-ons would be required for this use case?

Can Defender for Cloud Apps provide controls such as monitoring, blocking, or restricting uploads of sensitive information to third-party SaaS applications?

Are there any prerequisites or limitations when integrating third-party applications with Microsoft Purview DLP / Defender for Cloud Apps?

For future SaaS applications, is there a recommended Microsoft architecture that would allow us to onboard additional applications and apply centralized DLP controls?

Request

Please review the above requirements and provide us with:

Microsoft's recommended architecture/configuration

Confirmation of supported scenarios

Any licensing prerequisites

Configuration prerequisites

Known limitations or considerations

Relevant Microsoft documentation, if available

This confirmation will help us finalize the solution design and proceed with the customer's implementation without impacting their existing user profiles or business operations.

Mathias Baden 0 Reputation points

2026-09-10T11:08:51.26+00:00
Business Premium isn't enough for either approach.

To cover Salesforce you'd need to upgrade:

Native Purview DLP now supports Salesforce, Box, Dropbox and Google Workspace as DLP locations directly — this is the path Microsoft is moving toward, as MDCA file policies retire Jan 6, 2027. Requires E5 or E5 Compliance / Purview Suite.

MDCA is the alternative for broader SaaS control — requires E5, E5 Security / Defender Suite, or standalone MDCA licensing.

If you go with MDCA, you can use Conditional Access App Control for the real-time monitoring, blocking, and upload restrictions.

Keka HR isn't natively supported by either, so it would rely on Conditional Access App Control as a custom app

1 answer

Your answer

Mathias Baden 0 Reputation points

2026-09-10T11:08:51.26+00:00

Business Premium isn't enough for either approach.

To cover Salesforce you'd need to upgrade:

Native Purview DLP now supports Salesforce, Box, Dropbox and Google Workspace as DLP locations directly — this is the path Microsoft is moving toward, as MDCA file policies retire Jan 6, 2027. Requires E5 or E5 Compliance / Purview Suite.

MDCA is the alternative for broader SaaS control — requires E5, E5 Security / Defender Suite, or standalone MDCA licensing.

If you go with MDCA, you can use Conditional Access App Control for the real-time monitoring, blocking, and upload restrictions.

Keka HR isn't natively supported by either, so it would rely on Conditional Access App Control as a custom app

Answer 1

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more