Microsoft 365: Detection of Shadow AI in the Microsoft 365 Admin Center!
With Agent 365 now generally available, we are beginning to see the arrival of new capabilities related to Agent 365, or features that are made available subject to meeting certain licensing requirements. This is the case with Shadow AI, which allows us to detect Shadow AI scenarios on devices managed by Intune.
Shadow AI is available in an organization if two conditions are met:
- The organization is part of Microsoft’s Frontier program.
- At least Microsoft 365 E3 licensing is in place; that is, while the feature is still in Preview, Agent 365 licenses are not yet required.
Once these prerequisites are met, a new Shadow AI section will appear under Agents.
- In this new section, agents or tools that can be deployed on corporate devices will start to appear, such as OpenClaw (note: at the moment, this is the only one available).
- For each agent or tool, we can click on Start detection, which allows us to configure Intune policies to monitor Shadow AI signals.

- In the configuration panel, we simply enable the policies that apply to our specific scenario.

From this point on, it is simply a matter of waiting and verifying that everything is configured as described in this Microsoft Learn article: Understand Shadow AI in Microsoft 365 admin center – Microsoft 365 admin | Microsoft Learn