Integrate Okta Workforce Identity with Red Canary

The integration between Red Canary’s Managed Detection and Response (MDR) service and Okta’s Workforce Identity platform helps organizations detect and respond to credential compromise before it results in a data breach.

Stolen credentials are a common path for attackers to gain initial access, and while multi-factor authentication (MFA) can help mitigate this risk, adversaries have found ways to circumvent it. Red Canary’s integration with Okta Workforce Identity allows users to correlate Okta alerts with data from other security tools to quickly identify potential credential compromise incidents. Additionally, Red Canary has developed custom detections to identify threats, such as MFA fatigue attacks, that Okta’s out-of-the-box alerts may miss.

Once a credential compromise is detected, Red Canary’s built-in Security Orchestration and Automated Response (SOAR) platform enables organizations to easily configure automated responses in Okta, such as suspending user accounts, clearing sessions, and applying access restrictions. This helps organizations respond quickly and effectively to mitigate the risk of a data breach stemming from stolen credentials.

To integrate Okta Workforce Identity with Red Canary, follow the procedure below from beginning to end.

Note: This functionality is only available to Red Canary users who have an MDR Identities subscription.