Description
The user setting LinkedIn account connections is set to No: users cannot link their work account to a LinkedIn account, and LinkedIn profile information is not shown in Microsoft 365 apps.
The setting has no public API.
Rationale
Once connected, LinkedIn and Microsoft 365 exchange profile and contact data. This builds a picture of the organization's people and relations that attackers use for targeted phishing, and it moves personal data to a third-party service, which matters under GDPR.
Impact
Users no longer see LinkedIn profile cards in Outlook, Teams or other apps. Existing connections are removed.
Setting
| Location | Microsoft Entra admin center > Entra ID > Users > User settings > LinkedIn account connections |
| Default | Yes |
| Recommended | No |
Audit
- Sign in to the Microsoft Entra admin center (https://entra.microsoft.com) as at least a Global Reader.
- Browse to Entra ID > Users > User settings and read LinkedIn account connections.
- Fail if it is Yes or Selected group.
Remediation
- Sign in to the Microsoft Entra admin center as at least a Global Administrator.
- Browse to Entra ID > Users > User settings.
- Set LinkedIn account connections to No and select Save.
Rollback
Set the option back to Yes or Selected group.
References
- Integrate LinkedIn account connections in Microsoft Entra ID Microsoft, vendor-doc, accessed 2026-10-24
Mappings
| Framework | ID | Relation |
|---|---|---|
| NIST SP 800-53 Rev. 55.1.1 | CM-7 | related |
| NIST SP 800-53 Rev. 55.1.1 | AC-21 | related |
How this control relates to the other framework's: equivalent, stricter, looser, partial or related.
Threats mitigated
| Taxonomy | ID |
|---|---|
| MITRE ATT&CK | T1593.001 |
People and lifecycle
| Authors |
|
| Introduced in | v0.1.0 |
| Created, updated | 2026-10-24, 2026-10-24 |
| Translations | fr |
