Identity Settings

Identity Settings is where you manage your Microsoft Entra ID integrations for ITDR, configure dark web monitoring settings, and configure your posture check preferences.

Integrations tab

The Integrations section is where you set up your integration with Entra ID for ITDR. For more information, see ITDR integration guide.

If you've already completed the setup, the Configured Integrations table shows the integrations used to collect data and run the security assessments against your Entra ID environment. Expand a row to see the child integrations and their health status.

Disable integration

To disable the integration and posture checks for an identity provider, turn off the toggle in the Status column and confirm your action.

Edit integration

To edit the integration configuration, click the Edit icon in the Actions column.

Delete integration

To delete the integration and remove the identity provider and all findings, click the three dots in the Actions column, click Delete Integration, and confirm your action.

Dark Web Monitoring tab

In the Dark Web Monitoring tab, you can set which primary domains are monitored for credential leaks and configure users for VIP monitoring.

Select domains for credential leak monitoring

The Credential Monitored Domains section lets you select which primary domains are monitored for credential leaks. Domains sync from your Entra ID tenant every 24 hours and do not show in the Credential Monitored Domains section immediately after initial ITDR setup.

When synced, do as follows to select the domains you want credential leak monitoring turned on for:

1. Click Edit Domains.
2. In Credential Monitored Domains, select each domain you want credential leak monitoring turned on for.
3. Click Save.

Select users for VIP monitoring

The VIP Monitored Users section lets you select Entra ID users that you consider very important. The users you select have a VIP tag throughout ITDR to signify their VIP status. VIP monitoring focuses on identifying business-related leaks, mentions, or campaigns against users that include personal email addresses, phone numbers, or social media accounts.

To select a user for VIP monitoring, do as follows:

1. Click Add User.
2. In Configure VIP Monitoring, click the Name menu and select a user.

3. Define the attributes that you want to monitor as follows:

   • Enter email addresses to be monitored, such as personal email addresses. Click the Plus icon next to Email to add a maximum of five addresses.
   • Enter a primary and secondary phone number. Click the Plus icon to add a maximum of five numbers.
   • Enter a zip code.
   • Enter a social media username. Click the Plus icon to add a maximum of five usernames.

4. Click Configure.

   

When you configure a user, we monitor the dark web for the user's attributes along with company names and domains to identify potential business leaks or mentions within the past year.

To edit a VIP user's attributes or delete a user's VIP status, click the Pencil icon or Delete icon in the VIP Monitored Users section.

Posture Check Preferences tab

In the Posture Check Preferences section, you can view and turn on and turn off the posture checks used by ITDR. All posture checks are turned on by default.

Filter and search for posture checks

Use the Quick Filter field and status filters to find checks of interest.

View posture check details

Click a title on a check card to open the details panel and see more information.

Customize posture checks

Click the toggle in the check card or the details panel to turn on or turn off a posture check. Disabled checks show who last turned it off and when in the details panel.