Hello, and thank you for watching this dual success capsule. Today we will cover how to integrate with Cisco identity intelligence.00:06My name is Sheila Vida and I am a security customer success specialist. In this capsule, we will cover what Cisco Identity intelligence is, also known as CII, and then we will deep dive on how to integrate different systems with Cisco Identity intelligence, and do.00:16Do a demo of this process.00:35You will then leave with some summary points around integrating with CII. Cisco identity intelligence provides complete visibility into every identity element in your organization. The section on the left, which is practically what we'll deep dive on today.00:37Show that Cisco identity intelligence can get information across multiple data sources. These information are then fed into the posture management and detection and response engine to correlate information from these different sources.00:56Depending on the insights highlighted by CII, you can, you then have the ability to integrate it with your workflow systems that you're using here or other applications. There is a separate success capsule around the introduction to Cisco identity.01:14Intelligence available in community.cisco.com that we recommend you check out. In this module, we are covering integrations in Cisco identity intelligence. CII integrates with a number of systems.01:33To ingest data, not just about the user information, but non human identities, devices, and applications which are accessed in your environment. In addition, it also integrates with external systems to get robust information to further get insights for the analysis.01:49And drive seamless workflows in your environment by integrating with your communication or notification targets and ticketing and reporting systems. Now let's do a quick demo of how to configure an integration in CII.02:09So I will start with logging into a tenant called Genie. So this is a test tenant for CII that everyone can access and you could log in with any of these credentials.02:26I log in with my Cisco SSO login, and then from here I will expand it to show the integrations page. While that is loading.02:43Let's that one more time. This page shows all the integrations that can be configured in CIAI since this is a test lab. And if you want to see what a particular configuration looks like, click edit settings.02:59And you will see how a particular integration is configured. So you will see here that apart from the name integrations, you can also do manual uploads like specific information for your organization. I did mention integrating with your workflows and notification targets.03:15Along with some shared signals. If you want to add an integration which is not on the list, you could do so by filling up this form, and then our team will review the information that you send.03:33So let's try to add an integration. I can't do it in Jeannie so I'm using my own lab. So I'll go to add integration and for this one we are adding intra ID. So we can click that documentation article to give that a step by step.03:50Of how to configure intra ID. So a couple of call outs there and then the process starts by creating an app registration. So we go to app registration in intra, and then give the app registration a name.04:06And then select the account type as single tenant only and then click register. Now we will copy the client ID information and feed it in the application ID.04:24In CII and then copy the tenant ID into directory ID. I'm changing one digit because I already have a configuration available and it's gonna error out if there's a duplicate, so just to complete this process, I changed the last number to something different.04:40Cool. All right, so we now have the registration and now the next step of the process is configure the API permissions and follow the steps on the document. We go to the API permission section on your app.04:58And then you will need to add a permission, Microsoft graph, application permission, and follow the list on what permissions you you need to be adding. So let's take a couple of them like the agent card manifest.05:13One, and then yes, you need to add each one of these API permissions. Again, let's let's add a couple, a couple of them just to show the process here and yes, you could keep on.05:31Searching and then keep on adding them and then clicking save. So those are the read only permissions. There's also a handful of read write permissions for you to be able to do remediation actions in CII. So let's take one on directory.05:47And per the document, we'll need to add both read and read write all and then click add permissions. Alright, so let me open another registration which I pre created.06:04Where all of the permissions we added has already been configured just to demonstrate that you'll need to add all of those permissions there. Right, the next step of the process is to configure a client secret.06:19And we do click add a client secret, name it appropriately, and then click add. Now this information will then be copied to your CIA application on the applicable.06:36Area there and value and secret ID. I did mention earlier that I do have the same entry ID configuration because I'm using my lab, so we'll click connect to complete the process, but this will fail because that.06:53That tenant ID is already shared with a new integration. So to proceed, I'll show the pre configured setup that I already have, which is this intra ID, just like click edit settings here, and then you will see that the configuration here is as follows.07:12We'll check the advanced settings and confirm any other configuration that we'll need to set up per the documentation. Just scroll scroll through that document there.07:31And that should have been it. Okay cool. So once you've added all the permissions, you're gonna need to grant that admin consent for your tenant. It was already done for this.07:47Preset configuration here. Just keep reading through the document if there's anything else applicable. So we kind of like already did the creating of the application because it was faster to switch the values between the two pages. And then we.08:04Exit out of the pre configured integration, and you'll see that it has connected and has started gathering some records. And we're once you create your integration just click collect now so it will start the process. So in this case, because it's pre configured, you'll see that there are already some components.08:23Minutes which are part of the intubation that we did with this most secure intra ID. All right, that ends our demonstration. So let's go, let's go back to our slides.08:42To close this capsule off, we'll leave you with three main points. The 1st one is each integration in Cisco identity intelligence has a detailed integration guide, so we recommend utilizing this as you configure the applications.08:592nd point is while we do have a number of named integrations, there are generic integration options available. So e.g., in our genie tenant, you did see that we have an ability to add a manual CSV file for, let's say, network IP information and then.09:16There is also an integration for webhooks for your notification targets if that's in your workflow.09:35And then lastly, integrate as much systems as possible. The more identity sources and information you give CII, the more data contexts and insights for analysis you could get. Also.09:41Utilize the notification targets, the same integrations, there's also like an API based integration for your reporting systems to further simplify your workflows in your environment. Thank you for joining us in this.09:56Dual success capsule.10:13
