Cisco Identity Intelligence Integration

Cisco Identity Intelligence allows you to gain full visibility over all your identities. This is accomplished by bringing in a vast amount of data on identities from a range of sources including traditional identity sources like Entra ID (formerly Azure AD), Duo, and Okta, non-traditional sources like Github, Google, or Salesforce, and HR systems, such as Workday.

Cisco Identity Intelligence can ingest data from the following sources:

  • Auth0

  • AWS

  • Duo

  • GitHub

  • Google Workspace

  • Microsoft Entra ID

  • Microsoft Entra ID Event Hub

  • Okta

  • Salesforce

  • Workday

For more information, see the Configuring Integrations topic in the Cisco Identity Intelligence Knowledge Base.

  1. In the Cisco XDR navigation menu, choose Administration > Integrations.

  2. On the Integrations page, click the Cisco tab and navigate to the Cisco Identity Intelligence integration.

  3. Click Enable. The Security Cloud Sign On page is displayed.

  4. Log in to Cisco Security Cloud Control.

  5. In the left-hand navigation, choose Platform Management > Subscriptions.

  6. In the Cisco Identity Intelligence section, click Action required.

  7. Complete the form.

  8. In the left-hand navigation, choose Identity Intelligence.

  9. Select an integration and configure to share data with Cisco XDR.

  10. The Cisco Identity Intelligence integration is listed in the My Integrations area on the Cisco XDR Integrations page.

You can perform the following tasks after you integrate Cisco Identity Intelligence with Cisco XDR:

  • Assets - View users as reported by Cisco Identity Intelligence. For more information, see Users.