This policy will create an incident when Flexera SaaS Manager identifies suspicious users logging into SaaS applications.
This policy integrates with the Flexera SaaS Manager API to retrieve suspicious activities. Therefore the following are prerequisites for this policy to execute:
- Flexera SaaS Manager implementation with HR roster connected
- Please contact your Flexera Customer Success Manager for assistance to generate your FSM token.
This policy template has the following input parameters:
- Email Addresses - Email addresses of the recipients you wish to notify
- Incident Table Rows for Email Body (#) - The number of results to include in the incident table in the incident email. Set to '0' to not show an incident table at all, and '100000' to include all results. Does not impact attached CSV files or the incident as presented in Flexera One.
- Attach CSV To Incident Email - Whether or not to attach the results as a CSV file to the incident email.
- Send an email report
This Policy Template uses Credentials for authenticating to datasources -- in order to apply this policy template you must have a Credential registered in the system that is compatible with this policy template. If there are no Credentials listed when you apply the policy template, please contact your Flexera Org Admin and ask them to register a Credential that is compatible with this policy template. The information below should be consulted when creating the credential(s).
For administrators creating and managing credentials to use with this policy, the following information is needed:
- Flexera Credential (provider=flexera) which has the following Flexera SaaS Manager permissions:
SaaS Manager: Viewer
The Provider-Specific Credentials page in the docs has detailed instructions for setting up Credentials for the most common providers.
- Flexera
This policy template does not incur any cloud costs.