Joint Solution Brief

LogRhythm and Okta:
Security Through Identity and Analytics
LogRhythm and Okta have partnered to deliver a robust identity monitoring
solution. By combining the Okta Identity Cloud with LogRhythm’s NextGen
Security Information and Event Management (SIEM), security analysts andaudit teams correlate the information they need to identify and respondto the most critical incidents — those involving compromised credentials or
unauthorized access — and meet demanding compliance requirements.

Together, LogRhythm and Okta allows users to:• Link events triggered by suspicious or malicious credential activity• Collect authentication data from across the enterprise to provide greater
visibility on-premise, in the cloud, and across devices• Effectively coordinate security and IT functions to remediate user accounts• Establish a foundational pillar for organizations seeking to build a“Zero Trust” architecture
By integrating the Okta Identity Cloud with the LogRhythm Platform, security
teams can monitor and protect account activity to gain unified, real-time
visibility across the organization, and identify critical security threats.
The solution generates exceptionally detailed forensic evidence, including
tracking and reporting on all account access activity — meeting audit andcompliance requirements.

About LogRhythm
LogRhythm is a world leader
in NextGen SIEM, empoweringorganizations on six continents tosuccessfully reduce risk by rapidly
detecting, responding to andneutralizing damaging cyberthreats.
The LogRhythm platform combines
user and entity behavior analytics(UEBA), network traffic and behavior
analytics (NTBA) and security
automation & orchestration (SAO)
in a single end-to-end solution.
LogRhythm’s Threat Lifecycle
Management (TLM) workflow serves
as the foundation for the AI-enabled
security operations center (SOC),
helping customers measurably
secure their cloud, physical andvirtual infrastructures for bothIT and OT environments. Built for
security professionals by security
professionals, the LogRhythm
platform has won many accolades,
including being positioned as a Leader
in Gartner’s SIEM Magic Quadrant.

Okta Identity Cloud• User authentication logs via API• Adaptive Multi-Factor
Authentication (MFA)• Single Sign-On (SSO)• Universal Directory (UD)Other Log, Security, and Machine Data
LogRhythm Forensic Sensor Data

Machine Data Intelligence
Automatically collect andprocess data from across the
distributed environment!

LogRhythm NextGen SIEM Platform• Behavioral Security Analytics(User/Entity, Network & Endpoint)• NextGen SIEM & Log Management• Network Monitoring & Forensics

SmartResponse™
Automatically update
ACLs and IoC watch lists• Endpoint Monitoring & Forensics• Security Automation & Orchestration

WWW.LOGRHYTHM.COM

About Okta
Okta is the leading independent
provider of identity for theenterprise. The Okta Identity Cloudenables organizations to bothsecure and manage their extended
enterprise, and transform theircustomers’ experiences. With over
5,500 pre-built integrations toapplications and infrastructure
providers, Okta customers caneasily and securely adopt thetechnologies they need to fulfill theirmissions. Over 4,000 organizations,including 20th Century Fox, JetBlue,Nordstrom, Slack, Teach for Americaand Twilio trust Okta to securely
connect their people and technology.

PAGE 1

Joint Solution Brief - LogRhythm and Okta
LogRhythm and Okta are tightly integrated, combining the value of best-of-breed identity and access management solution
with the threat management capabilities of LogRhythm’s NextGen SIEM. The combined offering empowers customers toidentify behavioral anomalies, internal and external threats, and to prioritize their responses based on accurate enterprisesecurity intelligence.

LogRhythm for Integrated Enterprise Security Intelligence• Dynamic defense for detecting and stopping unauthorized network threats• Multi-dimensional behavioral analytics to deliver real-time security intelligence• Deep visibility into all aspects of user, network, and endpoint behavior activity
throughout the IT environment• Tight integration for consolidated threat management

Unified Threat Management

User Management

Challenge:
With apps and data in the cloud and on-prem, organizations
need to correlate the data across disparate security
systems and distinguish real threats from false alarms.

Challenge:
Cyber attackers target user accounts to gain access tosensitive, valuable data. To protect these credentials
and the critical resources to which they provide access,organizations require effective prevention, detection, andresponse on all suspicious account activity in real-time.

Solution:
LogRhythm incorporates the data from Okta into
LogRhythm’s automated advanced correlation rules. Thisdelivers intelligent alerts identifying suspicious accountactivity within a customer’s environment. Moreover, users
gain deeper visibility into application usage, like whichusers are authenticating into specific applications.
Additional Benefit:
SmartResponseTM plug-ins are designed to actively defend
against attacks by initiating actions that can mitigate
cyber threats. By reducing the time to perform common
mitigation steps, LogRhythm can prevent escalation ofhigh-risk incidents.

Solution:
By integrating Okta with LogRhythm, security teams
can monitor and protect user credentials. Equippedwith rich identity context from Okta, security teams
can effectively and efficiently respond to incidents
involving credential misuse.
Additional Benefit:
If suspicious or malicious user activity occurs, aLogRhythm SmartResponse can activate to force
step-up authentication, reset or revoke credentials,
suspend sessions, force step-up authentication via
multifactor, or terminate user sessions.

WWW.LOGRHYTHM.COM

PAGE 2©2018 LogRhythm Inc. | JSB1007_Jun18