Shared Signals Framework (SSF) Transmitter for Okta
| You can now send user risk signals from XDR
to Okta through the Shared Signals Framework (SSF) Transmitter in
Cloud Identity Engine (CIE). The SSF Transmitter enables user risk
signals generated by XDR to be used in Okta entity risk policy
rules. For example, if XDR detects user activity that is
considered high risk during an active Okta session, CIE receives this
signal and sends the security event to Okta using the SSF Transmitter.
Depending on the specific risk entity policy rule
configured by the Okta administrator, different actions will be taken,
like terminating all user sessions and tokens. By sharing risk
intelligence between platforms, your security infrastructure can respond
to threats in a coordinated, rapid manner. Activation of this feature
requires an integration of XDR with CIE and Okta Identity Threat
Protection (ITP). |