Cisco Identity Intelligence

Cisco Identity Intelligence provides full visibility into all your identities by aggregating data from diverse sources, including Entra ID, Duo, Okta, GitHub, Google Salesforce and Workday.

This integration enables you to connect Cisco Identity Intelligence (CII) with Cisco XDR via Cisco Security Cloud Control. Cisco Identity Intelligence provides full visibility into all your identities by aggregating data from diverse sources, including Entra ID, Duo, Okta, GitHub, Google Salesforce and Workday.
Via this integration, you can see all the users and identities known by CII in User Insights in XDR, which also will populate critical account context into your incidents and investigations.

Automation

Automatic target creation for Cisco XDR automation

Health

Validates that the integration is healthy

Device Insights

Provides information about assets

North America

Europe

Asia-Pacific, Japan & China

These are workflows that you can install in Cisco XDR automation and use with this integration. These are different from built-in workflows which are built into Cisco XDR by default for all customers.

Community

Ingests Cisco Identity Intelligence (CII) "failed checks" into Cisco XDR as Custom Security Events, normalized as Detection Findings in the XDR Data Warehouse.

Community

⚠️ Note: this Workflow has been replaced by a superior version using XDR Detection Findings: "Cisco Identity Intelligence (CII): Ingest Critical Threat Checks".