Skip to content

Identity Settings๐Ÿ”—

Identity Settings is where you can configure your monitored domains, view the identity module integration health, and configure the Identity Posture check preferences.

Cloud API Integrations๐Ÿ”—

The Cloud API Integrations section displays a table of the Cloud API integrations used by Taegisโ„ข IDR to collect data and execute the security assessments against your Microsoft Entra ID environment. Expand a row to see the child integrations and their health status.

Note

The parent name will show the child with the most severe error condition.

Identity Settings

Disable Integration๐Ÿ”—

To disable the integration and posture checks for an Identity Provider, disable the toggle from the Status column and confirm your action.

Disable Identity Provider

Edit Integration๐Ÿ”—

To edit the integration configuration, select the edit icon from the Actions column.

Edit Identity Provider

Delete Integration๐Ÿ”—

To delete the integration and remove the Identity Provider and all findings, select the delete icon from the Actions column and confirm your action.

Delete Identity Provider

Dark Web Monitoring๐Ÿ”—

The Dark Web Monitoring tab allows you to set which primary domains are monitored for credential leaks and configure users for VIP monitoring.

Select Domains for Credential Leak Monitoring๐Ÿ”—

Select any domains registered in Entra ID that you want monitored for leaked credentials. In addition, you can see the count of users associated with each domain.

Domain Selection

Select Users for VIP Monitoring ๐Ÿ”—

The VIP Monitoring section allows you to select users that you consider very important. The users you select have a VIP tag present throughout IDR to signify their VIP status. VIP monitoring focuses on identifying business-related leaks, mentions, or campaigns against users that include personal email addresses, phone numbers, or social media accounts.

Note

VIP Monitoring is not intended to be a replacement for personal identity monitoring solutions, which often include sensitive PII monitoring and provide notifications when your personal information is found.

To select a user for VIP monitoring, do as follows:

  1. Click the Name menu and select a user.

  2. Define the attributes that you want to monitor as follows:

    • Enter email addresses to be monitored, such as personal email addresses. Click the Plus icon next to Email to add a maximum of five addresses.
    • Enter a primary and secondary phone number. Click the Plus icon to add a maximum of five numbers.
    • Enter a zip code.
    • Enter a social media username. Click the Plus icon to add a maximum of five usernames.

  3. Click Configure.

VIP Monitoring

When you configure a user, we monitor the dark web for the user's attributes along with company names and domains to identify potential business leaks or mentions within the past year.

To edit a VIP user's attributes or delete a user's VIP status, click the Pencil icon or Delete icon in the List of Monitored Users section.

Posture Check Preferences๐Ÿ”—

The Posture Check Preferences tab is where you can view and configure posture checks within IDR.

Tip

All posture checks are enabled by default.

Posture Check Preferences

Filter and Search for Posture Checks๐Ÿ”—

Use the search box and status filters to locate checks of interest.

Filters

View Posture Check Details๐Ÿ”—

Select a title within a check card to open the details panel to view more information.

Customize Posture Checks๐Ÿ”—

Use the toggle within the check card or the details panel to either enable or disable a posture check. Disabled checks will show who last disabled it and when within the details panel.

Customize Posture Checks