---
title: "Endpoint/Identity Discovery"
slug: "endpoint-identity-discovery"
updated: 2026-09-09T16:09:35Z
published: 2026-09-09T16:09:35Z
canonical: "docs.redcanary.com/endpoint-identity-discovery"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.redcanary.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Endpoint/Identity Discovery

During processing, Zscaler MDR will correlate alerts to endpoint and identity records that already exist in our system. You can also optionally enable discovery, which allows Zscaler MDR to create new endpoint or identity records if they don’t already exist.

## Enabling Endpoint or Identity Discovery

To turn on endpoint and/or identity discovery:

1. Click your user icon at the top right, then click **Endpoint/Identity Discovery**. ![](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/discovery_01.png?sv=2026-02-06&spr=https&st=2026-11-09T12%3A08%3A04Z&se=2026-11-09T13%3A08%3A04Z&sr=c&sp=r&sig=X%2FCMszLOUNuDXHq%2FYWOMNYCBDE3VO3CMSEY7n%2Fs9Uos%3D)
2. Check the **Enable endpoint discovery** and/or **Enable identity discovery** checkboxes, then add the applicable domain name(s). ![](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/discovery_02.png?sv=2026-02-06&spr=https&st=2026-11-09T12%3A08%3A04Z&se=2026-11-09T13%3A08%3A04Z&sr=c&sp=r&sig=X%2FCMszLOUNuDXHq%2FYWOMNYCBDE3VO3CMSEY7n%2Fs9Uos%3D)
3. Click **Save**.