
Open
Posted
•
Ends in 10 hours
Paid on delivery
Feature Brief: Microsoft 365 Security Evidence (Graph + GDAP) Overview This project relates to an MSP-focused SaaS platform used across multiple customer tenants. The platform already supports multi-tenant workflows, customer management, integrations, and reporting capabilities. This feature introduces a Microsoft 365 Security Evidence module designed to enhance existing functionality by automatically collecting lightweight Microsoft 365 security evidence through Microsoft Graph and GDAP. The goal is not to create a Microsoft administration portal, Secure Score clone, or detailed Microsoft security dashboard. The objective is to collect high-value Microsoft 365 evidence that helps reduce manual effort and support security-related assessments while allowing users to retain full control over final decisions. The feature should use Microsoft Partner Center and GDAP (Granular Delegated Admin Privileges) to allow an MSP to authenticate once and securely access delegated customer tenants. The workflow should support: - MSP Microsoft connection - Delegated customer tenant discovery - Tenant-to-client mapping - Scheduled evidence synchronisation - Evidence normalisation - Integration into Security Findings - Future scalability Feature Name Microsoft 365 Security Evidence Purpose The purpose of this feature is to: - Reduce manual assessment effort - Improve recurring review accuracy - Strengthen report evidence - Improve AI-generated content quality - Increase confidence in findings - Strengthen platform stickiness - Support historical continuity The feature should provide evidence only. Final status decisions must remain with MSP users. User Permissions Microsoft connection management available to: - MSP Admin Not available to: - Basic users - Read-Only users Evidence visibility within reports and findings may follow normal platform permissions. High-Level Workflow MSP Admin -> Connect Microsoft 365 -> Authenticate using Microsoft Partner Center + GDAP -> Discover delegated customer tenants -> Map discovered tenants to internal clients -> Scheduled evidence synchronisation -> Evidence normalised -> Evidence posted to internal API -> Security Findings updated -> Reports and AI content enhanced -> MSP confirms final findings Evidence Scope It should intentionally remain lightweight. Identity & Access Collect: - Multi-Factor Authentication presence - Privileged account protection - Security Defaults status - Conditional Access presence - Guest user count Email Security Collect: - Safe Links enabled status - Safe Attachments enabled status - Anti-phishing protection status Device Evidence Collect: - Intune presence - High-level device compliance indicators Exclusions Do NOT include: - Access log ingestion - User activity reporting - Raw audit logs - Full Secure Score dashboards - Data Loss Prevention policies - Retention policies - Collaboration security settings - External sharing analysis - Raw Conditional Access exports - Mailbox information - Device inventories - Microsoft administration functionality Placement MSP Portal Add: - Microsoft 365 Security Evidence Suggested location: Settings > Data & Integrations Connection Management The platform should allow MSP Admins to manage Microsoft connectivity. Required actions: - Connect Microsoft 365 - Reconnect Microsoft 365 - Disconnect Microsoft 365 - Sync Now Display: Status: Connected via GDAP Last Sync: 22 August 2026 14:02 Last Successful Sync: 22 August 2026 14:02 Actions: - Sync Now - Reconnect - Disconnect Authentication Requirements Use: - Microsoft Entra ID - Microsoft Partner Center - GDAP Requirements: - MSP authenticates once - Customer tenants discovered automatically - Delegated permissions respected - Support consent handling - Support permission revocation - Support token refresh Tenant Discovery Requirements: - Discover delegated customer tenants - Respect GDAP role assignments - Retrieve tenant information - Maintain tenant relationship information Tenant Mapping Each Microsoft tenant must map to an internal client. Mapping should use: - Internal Client GUID If no mapping exists: Display: Unmapped Microsoft Tenant Detected Tenant: Northbridge Logistics Ltd Actions: - Map Existing Client - Create New Client - Ignore Do not automatically assign tenants. Sync Behaviour Default schedule: Automatic synchronisation every 24 hours Support: - Scheduled sync - Manual sync Rules: - Manual sync should not bypass throttling protections Display: Last Synced: 22 August 2026 14:02 Evidence Processing Collected Microsoft evidence should be: - Simplified - Normalised - Mapped into internal schema - Posted into /v1/security-evidence Raw Microsoft responses should not be surfaced directly. Security Findings Integration Evidence should support findings only. Evidence must not determine final status automatically. Example: Multi-Factor Authentication Suggested Status: Partially Deployed Evidence: - MFA detected for administrator accounts - MFA not detected for all users Confidence: High Last Synced: 22 August 2026 14:02 MSP Action: Confirm Final Status AI Integration AI may use Microsoft evidence as supporting context. AI should: - Improve Executive Summaries - Improve recommendations - Improve What's Changed narratives AI must not: - Independently determine security conclusions - Override MSP decisions Development Ownership & Collaboration This project will be delivered alongside an existing development team. The Microsoft specialist is expected to own Microsoft-specific functionality only. Microsoft Specialist Ownership Responsible for: - Microsoft Entra configuration - Microsoft Graph implementation - Partner Center integration - GDAP implementation - Authentication flows - Consent handling - Token lifecycle management - Delegated tenant discovery - Evidence collection - Evidence normalisation - Microsoft technical documentation Existing Development Team Ownership Responsible for: - Frontend implementation - Database structure - Existing API integration - Security Findings integration - Report integration - Activity Log integration - AI integration - Deployment - Testing - UAT Integration Approach Microsoft functionality should operate as a modular service. Service output: /v1/security-evidence Existing platform components will consume the data. The implementation should: - Minimise changes to existing architecture - Avoid tightly coupling Microsoft-specific functionality to core platform logic Security & Data Handling Requirements: - Minimise stored Microsoft data - Do not store raw Microsoft responses unless required - Store only normalised evidence - Encrypt refresh tokens - Encrypt sensitive credentials - Use HTTPS/TLS - Support key rotation - Support permission revocation - Support token invalidation Error Handling Must support: - Retry logic - Throttling awareness - Token expiry handling - Consent failures - Permission failures - Sync failures - Tenant discovery failures Provide: - Granular technical logging - User-friendly messages Activity History Record meaningful Microsoft events only: - Microsoft connection created - Microsoft connection removed - Tenant mapping created - Evidence sync completed - Evidence sync failed Do not record: - Individual API calls - Token refreshes - Low-level system activity Future Expansion Architecture should support future evidence additions without redesign. Future examples: - Secure Score indicators - Defender posture signals - Identity risk signals - Device posture signals V1 should remain limited to the defined lightweight evidence scope. Deliverables Source code with clear project structure Preferred: - .NET - Node.js - Setup scripts and concise README Requirements: - Development environment setup in under 30 minutes - Test harness demonstrating: - Delegated tenant discovery - Tenant-to-client mapping - Evidence collection - Evidence normalisation - Successful evidence posting - Technical handover documentation including: - Graph permissions used - Entra ID configuration - Partner Center configuration - GDAP requirements - Token handling approach - Consent handling - Retry strategy - Error handling approach Acceptance Criteria Successful execution within staging environment demonstrating: - MSP authentication using Partner Center + GDAP - Delegated customer tenant discovery - Tenant mapping - Evidence collection - Evidence normalisation - Successful posting to /v1/security-evidence - Scheduled synchronisation - No manual intervention required after initial setup UAT Scenarios UAT-MG-001 Scenario: MSP connects Microsoft using GDAP Expected Result: Delegated customer tenants discovered successfully UAT-MG-002 Scenario: Tenant discovered without mapping Expected Result: Tenant displayed as unmapped UAT-MG-003 Scenario: Manual sync initiated Expected Result: Evidence synchronises successfully UAT-MG-004 Scenario: Microsoft permissions revoked Expected Result: Connection status changes and sync stops UAT-MG-005 Scenario: Graph throttling encountered Expected Result: Retry logic executes successfully UAT-MG-006 Scenario: Evidence displayed within Security Findings Expected Result: Suggested evidence shown correctly with MSP override available Development Handover Requirements The implementation must be written & documented so that an existing development team can fully maintain & extend the functionality without requiring ongoing involvement from the Microsoft specialist. Required: - clear code structure - inline documentation - setup documentation - permission documentation - architecture overview - deployment instructions - guidance for adding future evidence types
Project ID: 40464039
57 proposals
Open for bidding
Remote project
Active 16 hours ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
57 freelancers are bidding on average $14,188 USD for this job

With over a decade of experience in high-scale systems and multi-tenant architecture, I understand your goal to implement the Microsoft 365 Security Evidence module on your MSP-focused SaaS platform. My background in scaling systems for over 1 million users and high-security FinTech directly applies to enhancing your platform with automated security evidence collection. A strategic insight for this project would be to ensure modular service output (/v1/security-evidence) to seamlessly integrate with existing platform components. Drawing from my success in building Telegram Mini Apps for a large user base, I am well-equipped to handle the complexities of this project and ensure its scalability and security. I encourage you to contact me to discuss the roadmap for implementing the Microsoft 365 Security Evidence module on your platform. I am confident that my expertise and strategic approach will help you achieve your project goals efficiently and effectively.
$16,000 USD in 75 days
6.2
6.2

As the founder and lead engineer at MHTechFusion, I can assure you that we are the perfect team to tackle your Multi-Tenant Microsoft 365 Evidence Integration project. With extensive experience in full-stack development, cloud integrations (AWS, Firebase, GCP) and API development, my team has built numerous production-ready systems similar to what you're looking for here. We understand the needs of MSP-focused SaaS platforms and have a proven track record in securely collecting and integrating data from multiple sources. Moreover, our proficiency in AI integration is particularly relevant to this project. We've successfully built AI-powered systems that improve data accuracy and quality while reducing manual effort. Our expertise with Microsoft Partner Center, GDAP, and Granular Delegated Admin Privileges (GDAP) will ensure that your evidence synchronization process is secure and seamless. Lastly, our dedication to delivering clean, maintainable code coupled with reliable performance-optimized applications sets us apart. We understand the value of scalability and how crucial it is for your platform to support future growth. Let's join forces to create a robust Microsoft 365 Security Evidence module that not only streamlines assessments but also bolsters the historical continuity for your MSP users.
$18,000 USD in 90 days
6.0
6.0

Hi, I can help you You want one secure Microsoft connection for the MSP, auto-find all customer tenants, map them to your clients, pull a small set of security facts on a schedule, clean the data, and post it to your existing API so findings and reports get smarter. No admin portal, no auto decisions, just clear evidence your team can confirm. This will take a few days, I've been doing this type of work for years. I have short walkthrough videos on my Freelancer profile showing similar work. 1) What parts are already built for client mapping and the /v1/security-evidence endpoint? 2) What should the evidence list and statuses look like in the end? Ideally, we have a call and go through the details together so I can make sure I understand everything correctly, address any questions, and give you a quote and timeline. Would that work? Best, Nicolas
$15,000 USD in 7 days
5.5
5.5

Hi there, I understand you need a modular Microsoft 365 evidence collector for an MSP SaaS platform that uses Partner Center + GDAP to discover delegated tenants, map them to internal clients, and post normalized evidence to /v1/security-evidence; my background in Entra ID, Graph, Partner Center and multi-tenant integrations makes me a fit to deliver this. - Implement Partner Center + GDAP authentication flow and delegated tenant discovery service with token lifecycle and encrypted refresh tokens - Build evidence collectors (Graph queries) for MFA presence, Security Defaults, Conditional Access presence, Guest user count, Safe Links/Safe Attachments/Anti-phishing status, Intune presence and device compliance indicators and post normalized payloads to /v1/security-evidence - Provide setup scripts, test harness demonstrating tenant discovery, mapping, sync, normalization and posting; include concise README and technical handover - Risk/quality-control: staged deployment with backup checkpoint, post-fix validation and rollback plan Skills: ✅ Microsoft Graph ✅ Microsoft Partner Center / GDAP ✅ delegated tenant discovery & token lifecycle ✅ security evidence normalisation & API integration ✅ encryption of tokens, throttling-aware retry strategy Certificates: ✅ Microsoft® Certified: MCSA | MCSE | MCT ✅ cPanel® & WHM Certified CWSA-2 I am available to start immediately. Is this already running on a live production server or should I prepare the staging-only flow for initial del
$14,000 USD in 7 days
4.7
4.7

A Warm Hello! We are readily available to start working on this project! I have read your job posting and glad to mention that we have extensive experience building secure SaaS integrations, Microsoft Graph-based services, and modular enterprise features designed for MSP and multi-tenant environments. We understand the nuances of Microsoft Partner Center, GDAP delegation, token lifecycle management, and Graph API operational constraints, including throttling, consent management, and delegated tenant discovery. We would be excited to collaborate with your existing engineering team and deliver a robust Microsoft integration foundation that supports your future roadmap without unnecessary complexity. Best regards, Ana
$20,000 USD in 70 days
6.5
6.5

Hello!, I am a Florida-based senior software engineer with extensive experience in cloud computing, API integration, and SaaS solutions. I’ve carefully reviewed your project on Microsoft 365 Security Evidence integration and I’m excited about the opportunity to contribute. With over 15 years in the field, I focus on creating practical, maintainable, and ROI-driven solutions. To ensure I fully understand the project, could you please clarify the following questions? 1. Are there specific Microsoft Graph functionalities you want to prioritize for the integration? 2. What are your key performance indicators for this project to measure success? My approach includes defining clear milestones, leveraging Microsoft Graph for data retrieval, and ensuring seamless integration with existing systems. I’ve worked on similar projects, including a multi-tenant SaaS application that utilized Azure for cloud infrastructure and API integrations. I’m committed to delivering robust solutions that meet your needs. Let’s connect to discuss how I can help achieve your project goals! -James
$15,000 USD in 35 days
4.4
4.4

I noticed your need for a robust Microsoft 365 evidence integration solution, similar to how we've successfully architected secure data pipelines for sensitive compliance data in previous projects. My expertise in Microsoft Graph API and Graph Security API, coupled with a deep understanding of GDAP delegation for tenant-to-tenant access, directly aligns with the requirements outlined. My approach will involve leveraging Microsoft Graph's extensive APIs to pull security events and logs, focusing on audit logs, sign-in logs, and potentially threat intelligence data. I'll implement a secure, programmatic GDAP setup to gain read-only access to the target tenants, ensuring minimal privilege and adherence to security best practices. A phased integration plan will prioritize core data sources, followed by optional extensions based on your specific needs. How are you currently managing evidence collection across multiple M365 tenants, and what are the primary compliance drivers for this integration? I'm available for a brief call to discuss your specific tenant configurations and how we can tailor this integration for optimal security and efficiency.
$17,148 USD in 21 days
3.8
3.8

⭐⭐⭐⭐⭐ Build Microsoft 365 Security Evidence Module for Efficient Data Collection ❇️ Hi My Friend, I hope you're doing well. I’ve reviewed your project details and see that you are looking for a Microsoft 365 Security Evidence solution. You don’t need to look any further; Zohaib is here to help you! My team has successfully completed 50+ similar projects for Microsoft security modules. I will create a lightweight system that gathers high-value security evidence while keeping user control intact. ➡️ Why Me? I have 5 years of experience in developing SaaS applications, focusing on Microsoft technologies like Graph and GDAP. My skills include API integration, data normalization, and user authentication. I also have a strong grip on database management, ensuring seamless data flow and security. ➡️ Let's have a quick chat to discuss your project in detail. I can show you samples of my previous work that demonstrate my expertise in Microsoft solutions. I look forward to chatting with you! ➡️ Skills & Experience: ✅ Microsoft Graph API ✅ GDAP Implementation ✅ SaaS Development ✅ Data Normalization ✅ API Integration ✅ User Authentication ✅ Error Handling ✅ Security Compliance ✅ Technical Documentation ✅ Frontend Development ✅ Database Management ✅ Evidence Collection Waiting for your response! Best Regards, Zohaib
$12,000 USD in 2 days
4.7
4.7

You’re clearly trying to keep this intentionally narrow, which is the right call. The tricky part here isn’t Graph itself, it’s building the GDAP + Partner Center flow in a way that survives token expiry, revoked permissions, tenant changes, and throttling without becoming tightly coupled to the rest of the SaaS platform. I’d approach this as a standalone Microsoft integration service with three clean stages: delegated tenant discovery, lightweight evidence collection, then evidence normalisation before posting into `/v1/security-evidence`. That keeps future additions like Defender or Secure Score indicators isolated without forcing changes across the core platform. For syncs, I’d queue tenant processing individually so one failed tenant or consent issue doesn’t stop the whole cycle. I’d also persist only normalised evidence + encrypted refresh tokens, never raw Graph payloads unless debugging is explicitly enabled. I’ve handled similar API-heavy integration work in Python and PHP for multi-tenant systems where resilience and maintainability mattered more than dashboard complexity. Ready to start alongside your existing team.
$15,000 USD in 20 days
0.4
0.4

Hi there, I see you need a Microsoft specialist to build a modular Microsoft 365 Security Evidence feature using Microsoft Graph and GDAP for your MSP SaaS platform. You need Microsoft Entra configuration, Partner Center integration, GDAP implementation, delegated tenant discovery, evidence collection and normalisation, and a clean /v1/security-evidence API output, with clear documentation for your existing development team to maintain and extend. I have built similar Microsoft Graph integrations for 3 MSP platforms, including one that used GDAP to discover delegated customer tenants, collect MFA status, Conditional Access presence, Safe Links and Safe Attachments, Intune indicators, and posted normalised evidence to an internal API. I implemented token refresh, throttling aware retry logic, consent handling, and permission revocation. I will deliver source code in Node.js or .NET, a test harness, technical documentation covering Graph permissions, Entra ID setup, Partner Center config, GDAP requirements, token handling, retry strategy, and error handling. I will also provide guidance for adding future evidence types. My work will allow your existing team to maintain and extend the feature without ongoing involvement. Best regards, Mobasher Reza
$15,000 USD in 3 days
3.0
3.0

⭐ Plazo: 2 semanas | Coste: 12 000 $ | Servicio modular de evidencia de seguridad Microsoft 365 con Graph + GDAP ⭐ He trabajado con Microsoft Graph, Entra ID, autenticación multiusuario delegada e integraciones SaaS seguras donde la escalabilidad, el ciclo de vida de los tokens y el aislamiento entre usuarios eran esenciales. Su enfoque es técnicamente sólido y coincido en que esto debe ser una capa ligera de evidencia, no una recreación de Secure Score ni de herramientas administrativas. Implementaría la solución como un servicio modular independiente en .NET o Node.js, separado claramente de su plataforma principal. El servicio gestionaría autenticación Partner Center + GDAP, descubrimiento delegado de usuarios, consentimiento, sincronización programada, reintentos con limitación de velocidad, normalización de evidencia y publicación segura en `/v1/security-evidence`, evitando un acoplamiento estrecho con su arquitectura actual. La implementación incluiría almacenamiento cifrado de tokens, gestión de renovación, logging granular, asignación de tenants y recolectores de evidencia extensibles para añadir nuevas señales sin rediseñar el sistema. También priorizo la mantenibilidad, por lo que su equipo recibiría una base de código limpia, documentación integrada, scripts de configuración, guía de permisos y una transferencia técnica completa para garantizar propiedad y escalabilidad a largo plazo.
$12,000 USD in 14 days
0.0
0.0

Hi, this is a beautifully defined feature brief and exactly the kind of Microsoft‑side ownership I’m comfortable taking on. Your document lays out a clear boundary between the Microsoft specialist and the existing platform team, and the workflow you want to achieve is fully achievable with Graph, Partner Center and GDAP. The emphasis on lightweight evidence, normalisation, delegated tenant discovery and clean posting into your internal /v1/security-evidence endpoint is a smart architectural choice, and the brief captures that well. From the Microsoft side, I’d structure this as a modular service that handles Entra configuration, Partner Center auth, GDAP role validation, delegated tenant discovery, token lifecycle, throttling‑aware Graph calls and evidence normalisation. The document states that “The feature should use Microsoft Partner Center and GDAP (Granular Delegated Admin Privileges) to allow an MSP to authenticate once and securely access delegated customer tenants” and also that “Raw Microsoft responses should not be surfaced directly”, which aligns perfectly with a clean, maintainable service boundary. If you want, I can outline how I’d architect the Microsoft module so your existing team can maintain it long term, or walk you through how to keep the sync engine resilient and future‑proof.
$15,000 USD in 7 days
0.0
0.0

Soy Juan Pablo, especialista en integraciones multi‑tenant de Microsoft 365 para plataformas MSP, con experiencia profunda en Microsoft Graph, Partner Center y GDAP. Revisé tu documento y puedo asumir completamente la capa Microsoft tal como la defines: autenticación vía Partner Center y GDAP, descubrimiento de tenants delegados, manejo completo del ciclo de vida de tokens, recolección de evidencia ligera, normalización y envío al endpoint interno sin alterar la arquitectura existente. He construido servicios modulares para MSPs donde el objetivo es obtener evidencia precisa sin convertir la plataforma en un portal administrativo, por lo que entiendo la importancia de mantener el alcance acotado, estable y fácil de mantener por tu equipo. Puedo implementar todo el flujo: conexión del MSP, descubrimiento de tenants, mapeo, sincronización programada, llamadas a Graph con control de throttling, reintentos, manejo de consentimientos y errores claros para el usuario. La evidencia será mínima, normalizada y alineada con tu esquema, sin almacenar respuestas crudas de Microsoft. Entrego documentación completa, instrucciones de configuración, permisos requeridos y un test harness para que tu equipo pueda extender la solución sin depender de mí a largo plazo. Puedo comenzar de inmediato y trabajar de forma fluida con tu equipo actual para asegurar una entrega limpia y un traspaso sólido.
$10,000 USD in 80 days
0.0
0.0

Hello, We've thoroughly reviewed your project for integrating Microsoft 365 Security Evidence using Graph and GDAP within an MSP-focused SaaS platform. Your goal to streamline security assessments while maintaining user control aligns perfectly with our expertise. We recently completed a similar project involving Microsoft 365 integrations where we utilized Microsoft Graph and GDAP for secure, multi-tenant access and evidence collection. This experience has equipped us with a deep understanding of the required technical nuances. With over 8 years of experience and being among the top 1% on Freelancer.com, we have a proven track record in cloud computing, Azure, API integration, and SaaS platforms. Our expertise in building scalable, intelligent systems ensures we can deliver a robust and maintainable solution tailored to your needs. We invite you to message us with more details, enabling us to provide a detailed, customized proposal within 24 hours. Looking forward to the opportunity to contribute to your project's success. Best regards, Puru Gupta Top 1% Freelancer.com | AI-First Product Development Expert
$20,000 USD in 50 days
0.0
0.0

Maspalomas, Spain
Payment method verified
Member since May 23, 2026
₹400-750 INR / hour
₹1500-12500 INR
₹400-750 INR / hour
$25-50 USD / hour
$750-1500 USD
$15000-75000 USD
₹100-400 INR / hour
€30-250 EUR
₹12500-37500 INR
min $50 USD / hour
$15-25 USD / hour
$30-250 USD
₹600-1500 INR
min €36 EUR / hour
$10-30 USD
$10-30 USD
₹1500-12500 INR
min €36 EUR / hour
$2-8 AUD / hour
$250-750 USD