SaaS Security
Send SSPM Notifications to Webhooks
Table of Contents
Send SSPM Notifications to Webhooks
Learn how to send SaaS Security Posture Management notifications to another app's incoming
webhooks.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
Or any of the following licenses that include the Data Security license:
|
You can configure SaaS Security Posture Management to send notifications to a channel in Slack or
Microsoft Teams. To do this, you first create an incoming webhook in Slack or
Microsoft Teams for the channel. Refer to the Microsoft documentation or the Slack documentation for more instructions on creating incoming webhooks
in these apps. When you create a webhook in these apps, the apps provide you with a
URL that external apps can use to post messages. To enable SSPM to send
notifications to a Slack or Microsoft Teams channel, you provide SSPM with the
webhook URL for that channel.
Prerequisite: Before completing the following steps, create an incoming
webhook for a Slack or Microsoft Teams channel. Copy the incoming webhook URL that
the app provides.
- Log in to Strata Cloud Manager.Select .The Alerts & Notifications page lists all of the webhooks for your tenant.To add a new webhook, Create Webhook.Fill in the fields of the Create Webhook dialog.
- Provide a Name for the webhook, and select the App Type.Specify the incoming Webhook URL that you obtained from Slack or Microsoft Teams.Test Webhook to verify that SSPM can post messages to it.If the webhook test fails, verify that the Webhook URL is correct and reachable.If the webhook test succeeds, Save Webhook.Your new webhook is added to the table of webhooks on the Alerts & Notifications page. From the table of webhooks, you can enable or disable a webhook, edit a webhook, and delete a webhook.When a webhook is enabled, SSPM can send notifications to the webhook URL. SSPM will send notifications when apps are onboarded or deleted, the first time an app is scanned, and when scans detect changes to an app's configuration settings. The notifications are displayed in the Slack or Microsoft Teams channel that is associated with the webhook URL.The status column of the table indicates whether SSPM can send notifications to the webhook. SSPM displays the following status values for webhooks:
Status Meaning ActiveSSPM can connect to the webhook to send notifications.RegisteredThe webhook was recently created or reenabled in SSPM and is becoming Active.UnhealthyRecent attempts to connect to the webhook were unsuccessful, but SSPM will continue trying. Verify that the webhook URL is reachable and that the webhook is accepting incoming notifications. To test the webhook, select the edit icon in the Actions column and Test Webhook. This might be a temporary problem, but if attempts to connect to the webhook URL continue to fail, SSPM will set the webhook status to Down.Disabled The webhook isn’t enabled. To enable the webhook, position the Enabled toggle to the on position. Down Multiple consecutive attempts to connect to the webhook were unsuccessful. Verify that the webhook URL is reachable and that the webhook is accepting incoming notifications. To test the webhook, select the edit icon in the Actions column and Test Webhook.
