Configuring Sources in the Security Events Service

The Security Events Service can receive security events from multiple sources, including Omnissa products and services and third-party products such as Okta.

The Security Events Service supports two types of sources:

• Internal Sources: Internal sources are Omnissa services that generate security events, such as Workspace ONE UEM and Omnissa Access. You do not need to take any action to configure internal sources as the appropriate sources are automatically selected when you create a subscriber.

• External Sources: External sources are third-party identity or security products that transmit security events, such as Okta. The Security Events Service can receive security events from any product that implements the OpenID Shared Signals Framework (SSF) CAEP standard. You configure the third-party product as an External Source in the Security Events Service.

  Note: The Risk Analytics add-on license is required to configure external sources.

External Sources

You can configure the following types of external sources in the Security Events Service:

• Okta: See Configuring Okta as an External Source in the Security Events Service.
• Other products: See Configuring Third-Party Products as External Sources in the Security Events Service.