All sources
Integration
Wiz
Pull every Wiz finding via OAuth 2.0 device-code flow. No Entra admin involvement — the engineer authorises VinTekh from their own Wiz session.
Connect with device-code flow
OAuth 2.0 RFC 8628 · no admin involvement
What you'll need
A Wiz user account with permission to view findings (the default Project Reader role is enough).
Your tenant's API URL — find it in Wiz under Settings → Tenant Info → API Endpoint.
That's it. No Service Principal, no client secret, no Entra admin ticket.
Why device-code?
The classic Wiz integration needs an Entra admin to mint a Service Principal. Device-code skips that — you grant VinTekh access from your own Wiz session in a browser, the same way wizcli does.