New Features - Cloud Identity Engine - May 2025

You can now send user risk signals from XDR to Okta through the Shared Signals Framework (SSF) Transmitter in Cloud Identity Engine® (CIE). The SSF Transmitter enables user risk signals generated by XDR to be used in Okta entity risk policy rules.

For example, if XDR detects user activity that is considered high risk during an active Okta session, CIE receives this signal and sends the security event to Okta using the SSF Transmitter. Depending on the specific risk entity policy rule configured by the Okta administrator, different actions will be taken, like terminating all user sessions and tokens. By sharing risk intelligence between platforms, your security infrastructure can respond to threats in a coordinated, rapid manner. Activation of this feature requires an integration of XDR with CIE and Okta Identity Threat Protection (ITP).

Learn more and get started with Cloud Identity Engine.