How do I connect my systems to OptiTech for automated evidence collection?

Quick answer

In the OptiTech Console, go to Integrations, pick the system (Microsoft 365, Google Workspace, AWS, Azure, GitHub, Jira, Intune, CrowdStrike, Fortnox, and more), and follow the authorization flow. Connections use OAuth or a scoped service account with read-only permissions wherever the provider supports it. Once authorized, the relevant checks activate automatically and the first evidence lands within minutes.

Connecting the most common systems

Microsoft 365 / Entra ID: admin consent to a read-only app registration. Activates MFA coverage, dormant accounts, admin role checks, and offboarding verification.
AWS / Azure: a read-only IAM role or app registration in your tenant. Activates encryption, exposure, logging, and backup checks.
GitHub / GitLab: an org-level app installation. Activates branch protection, review requirements, and secret scanning checks.
Intune / Jamf: device compliance data: encryption, screen lock, patch level.
Fortnox / Visma: the employee register feeds joiner/leaver checks, so offboarding within 24 hours is verified against HR reality, not the IT ticket queue.

Each integration page lists exactly which permissions are requested and which controls the integration feeds, so your security reviewer can approve it with full information. For the security model, see how evidence collection works without installing agents.

After connecting

Verify status. The integration shows green with a last-sync timestamp. Sync issues surface here first; see troubleshooting sync failures.
Review activated checks. Under each control you can see which integration feeds it and the latest results.
Set alert routing. Choose where failures go: Slack, Teams, or tickets in Jira.

Managing credentials over time

Integration credentials should be rotated like any other secret; see rotating integration credentials. If you automate workspace setup, integrations can also be managed through the API or Terraform.