Okta is a cloud first identity platform that can connect anyone, to anything, be it an Application, Physical or Virtual Server, or even API’s. Detecting and preventing threats can prove challenging with Okta’s security capabilities alone, leaving your sanctioned business applications and the data they hold at risk.

Our traditional method of protecting our perimeter may not always keep all of our areas covered in this instance, as the perimeter may change day by day, or depending on who may be using the platform. Of course, accessing your sanctioned business applications is integral for day to day business operations, but how can you be sure that access is legitimate when you cannot use device type, location or network information to create rules or even analyse the log-in activity.

DatAdvantage Cloud helps to normalise and standardise permissions. If you think about permissions on data, read, write and so on, the permissions DAC works by are Create, Read, Update, Delete and Share. And in the same way as this applying to permissions on data, the ‘resources’ are really just the applications that Okta is allowing users access to and the levels of permissions. 

DAC can highlight which identities don’t have multi-factor switched on, meaning that those accounts could be insecure. This is making an attacker’s job so much easier. It will also be able to highlight any admins, super admins, guest accounts that are registered across the environment. 

Varonis is looking into and analysing all the identities, looking into what they have access to by combining entitlements and direct permissions and mapping all that together to show you where you’re at risk, but it’s also monitoring behaviour. It’s monitoring all the data access requests, all the account and privilege escalations, all of the account creations, assignments, all of the authentications. It does this cross cloud so it makes it really easy to answer questions like what did this user do when they logged into Okta, then did they access another application, then they may be exposed to something, then they may have created an account.

Varonis alerts you when something goes wrong – looking at all of the events and alerting you when something happens, when somebody escalates the privileges of an account. By leveraging Varonis Cloud you can easily manage Okta assignments as well as detect any suspicious activity to ensure your critical business applications are protected. Risks are prioritised by severity to the business over misconfigured users, and excessive application or permissions enrollments. 

Varonis focuses on three main risk areas around Okta’s security: