I N T E G R AT I O N B R I E FManage and Monitor
User Identities
With Okta and Rapid7 InsightIDR

Solution Overview
Sixty-six percent of employees report they can still access corporate data on
cloud services after leaving the corporation.1 If that is a problem, what about
stealthy attacks using compromised credentials? With the security perimeter
now at the individual user and extending far beyond the corporate network,
Okta’s Identity Management and Rapid7’s InsightIDR combine to provide
coverage for your entire network ecosystem, from the endpoint to the cloud.
This integration allows security analysts to provision simple, secure accessto cloud applications and monitor user activity for low-noise, high-valuealerts on stealthy intruder attacks. This includes the top two attack vectors
behind breaches: stolen credentials and malware.

Okta Identity Management
Okta’s Identity Management is a class leading SaaS solution which helps
enterprises enable their workforce to adopt the cloud. It integrates withthe hundreds of cloud applications you use today, saving time and adding
security for both IT and your end-users. This is done through easy accountprovisioning through Active Directory (AD), a seamless Single Sign On(SSO) experience, and secure Two Factor Authentication (2FA).

Rapid7 InsightIDR
Rapid7 InsightIDR is an intruder analytics solution that gives you theconfidence to detect and investigate security incidents faster. Only
InsightIDR gives you quality alerts without the noise, enables your entire
team to investigate an incident, and adds user context to your monitoring
solutions. Unlike other solutions, InsightIDR monitors activity not juston your network, but across endpoints, mobile devices, and the cloud.
InsightIDR gives you instant visibility into user activity across yourinfrastructure and monitoring solutions. Rapid7’s unique understandingof attacker methodologies is the key for producing these highly
accurate analytics.

1

http://mobileenterprise.edgl.com/news/Employees-Go-Rogue-with-Data97211		

Integration Benefits
1. Complete visibility into
your users’ authentication
activity, inside and outside
the network perimeter

2. Detect the attacks you’remissing across the entire
network ecosystem, fromthe endpoint to the cloud

3. Intelligent Single Sign On (SSO)
and Two-Factor Authentication(2FA)

4. Automatically detect
compromised credentials,
the number one attack vector

5. Monitor Okta Administrator
authentications and activity

022119Bring Confidence Into Your Cloud Architecture

Figure 1: Visualize your organization’s cloud authentications

How It Works

About Okta

Rapid7 InsightIDR uses Okta’s direct API to ingest the authentication datafor users across the organization. These logs are analyzed and combinedwith network, endpoint, mobile, and attacker methodology to detect
intruders and risky internal behavior. Incident alerts are automaticallygenerated in InsightIDR.
1. Set up Rapid7 InsightIDR
2. Forward Okta logs to InsightIDR’s collector

What You Need

Rapid7 InsightIDR

Okta is an integrated identity andmobility management service. Built
from the ground up in the cloud,Okta securely and simply connects
people to their applications from any
device, anywhere, at anytime. Okta
integrates with existing directories andidentity systems, as well as thousandsof on-premises, cloud and mobile
applications, and runs on a secure,reliable and extensively audited cloudbased platform.

About Rapid7Okta Identity Management

Rapid7 is advancing security withvisibility, analytics, and automationdelivered through our Insight cloud.
Our solutions simplify the complex,
allowing security teams to work more
effectively with IT and development
to reduce vulnerabilities, monitor formalicious behavior, investigate and shut
down attacks, and automate routine
tasks. 7,400 customers rely on Rapid7
technology, services, and research
to improve security outcomes andsecurely advance their organizations.

SupportPlease contact Rapid7 for support
or assistance at +1.866.380.8113, orthrough our Customer Portal.
Customer Portal©RAPID7 2018