...

Overview JumpCloud is a cloud-based directory platform for identity management. This platform enables IT teams to securely manage user identities and connect them to resources they need, regardless of provider, protocol, vendor, or location. This article guides you through the process of setting up JumpCloud for integration with Grip Security. This will allow Grip to perform the discovery process using events from JumpCloud. Prerequisites A privileged user (Admin or Command Runner) with access to the JumpCloud Administrator Console. How to Set Up JumpCloud for Grip From any tab inside the Administrator Console, click your account icon displayed at the top-right. Select   My API Key   from the drop-down menu. Your current API key is displayed in the resulting dialogue box. Copy and save the API key. What next? Send the API key generated in the previous steps to your Grip representative. The Grip team will then complete your …

Overview This guide explains how to scope the Grip Security application/integration for a specific security group. This guide describes how to enforce the scope on your O365 end instead of having Grip enforce it. If your Grip tenant tries to pull data on users outside the security group, it will fail. Prerequisites A user with admin privileges to your O365 tenant. A working PowerShell terminal. The Application client ID of the Grip application you created. Creating the policy If you already have a Mail-enabled Security Group you’d like to use for the scope, you can skip to Step 2 . Step 1 – Create the group Go to your Exchange admin center. On the left sidebar, under Recipients click Groups. Go to the Mail-enabled security tab. Click Add a group . Select Mail-enabled Security , and then click Next . Enter a name for the group under Name and add …

Overview Grip integration with HiBob enables data enrichment and provides security teams with deeper insights, better visibility, and improved risk management across SaaS applications. With this integration, you will gain:​ Stronger identity data accuracy – Hibob enriches Grip’s identity intelligence and reduces data gaps with organizational unit details, direct manager information, and activity status.​ Enhanced security inquiries and justifications flow – With direct manager and organizational unit information available, security teams can efficiently route security inquiries and access justifications to the right decision-makers.​ View HiBob Integrating with HiBob HRIS will enrich Identities' attributes, such as “ Organizational Unit, Manager , and Activity status .” This is available on the “ Identity ” page. Connect HiBob to Grip To connect the integration, contact your Grip dedicated CSM and provide them with HiBob “ User ID ” and “ Token .” Once the integration is connected, it will be found under “ Integrations >> Human Resources Information Systems. ” A green icon will indicate …

Overview A Google Workspace integration with Grip allows Grip to pull in email, sign-in, and additional data from a Google Workspace tenant. Once integrated, Grip will kick off a discovery process to ingest this data, providing insight into SaaS usage in your organization. This guide describes, step-by-step, how to set up the integration. This article also covers the required permissions and flow in order to integrate Google Workspace with Grip's SSPM module. Prerequisites Administrator account for the Google Workspace tenant undergoing integration. Setup Process Step 1 – Create a project Go to   Google Cloud Console . On the top bar click the project selector. In the dialog box that pops up, click   New Project. complete the form as follows: Project name:   Grip Security Project Organization:   Location:   Note:   You can leave the   Organization   and   Location   fields with their default values Click   Create. Click the project selector again, and select …

Overview Slack integration with Grip’s SSPM module allows Grip to assess critical security configurations in your Slack Enterprise Organization. Prerequisites A “ Slack Enterprise Grid ” is required A Grip user with Slack owner permissions We recommend reading the “ Introduction to Posture Management ” article to learn about posture at Grip. Configuration in Slack Create a new app From the Slack admin panel, go to   “Configure apps ”   (1)   >> click on Build   (2) . Click on”   Create New App ”   (3)   and select the” From   scratch ” option   (4) . Give your App a name – (Recommended to include the SSPM in the name)  (5) and select the workspace to develop your app in   (6) . Click the “Org Level Apps” in the side menu   (7)   >> “Enable Org-Readiness button ” (8) . Check the “ I understand. ..” checkbox >> “Yes, Enable” button   (9) . Add scopes From the side menu, click on   OAuth & Permissions   (10)   and add the following scopes: Bot Token Scopes …

In the following video, you will learn about Grip’s main dashboard and insights:

Overview The ServiceNow integration with Grip’s SSPM module allows Grip to pull configuration and security data from a single ServiceNow instance and provide actionable insights into Access Control, Session Security, Code Protection, Data and network Restrictions, and Threat Monitoring, along with detailed reports and guidance. This article covers the required permissions and flows to integrate ServiceNow with Grip's SSPM module. Prerequisites A ServiceNow System Administrator permission to configure a new connected app. How to configure SSPM In ServiceNow From ServiceNow, go to All >> Application Registry (1) Under the “ System OAuth ” >> go to the “Application Registries” window and click on “ New” (2) . From “ OAuth application, ” select “ Create an OAuth API endpoint for external clients ” (3) . Create a new Application registry Give the registry a “ Name .” Note that the “Client ID” is automatically populated when a name is entered (4). Ensure the “ Active ” checkbox is checked (5) . Increase the “ Access …

Overview Zoom integration with Grip’s SSPM module allows Grip to assess critical security configurations around AI, external user governance, meeting encryption and more, in your Zoom Enterprise Organization. Prerequisites “ Zoom Admin ” permissions Zoom Pro or Business account Zoom Configuration Create a new app From Zoom “ App Marketplace ,” go to “ Develop >> Build App ” (1) Select the “ Server to Server OAuth App ” (2) and click on “ Create ” Give the new app a name (3) and click " Create ." In the “App Credentials ” section, copy and save the “ Account ID, Client ID, and Client Secret .” (4) Click “ Continue .” In the “ Basic Information ” section, enter the “ Company Name ” and the “ Developer contact information .” (5) Click “ Continue ” (6) in the “ Token ” section. Click “ Add Scopes ” (7) Search for " account:read:admin " and click on " Select All Account Permissions " (8) Click on “ Done >> Continue ” Click on “ Activate your app .” (9) Connect Grip integration. Go to “ Posture …

Overview The Salesforce integration with Grip’s SSPM module lets Grip pull account data from a single Salesforce organization and provide configuration insights around Session Settings, Password Policies, Certificate and Key Management, File Sharing Security, and Access Controls. This article covers the required permissions and flow to integrate Salesforce with Grip's SSPM module. Prerequisites A Salesforce System Administrator permission to configure a new connected app. Salesforce setup. From Salesforce, go to Setup (1) >> Apps >> App Manager (2) >> New Connected App (3) . Select the “Created a Connected App” option (4) and click “ Continue .” Enter the connected app “ Basic Information ” (5) . In the “ API (Enable OAuth Settings) ”, fill in the following details: Check the “ Enable OAuth Settings ” checkbox. In the “ Callback URL ” (6) enter the following URL. https://central-prod.dep.grip.security/central/v1/integrations/salesforce/auth/callback Add the following Oath scopes (7) : Manage user data via APIs (api …

Overview   PingOne   simplifies identity management and enhances security across enterprise IT environments, making it easier for organizations to manage user identities, access permissions, and application integrations securely and efficiently.     This guide provides step-by-step instructions for creating API keys, configuring application settings, and granting necessary roles within   PingOne . Prerequisites    Administrator access to   PingOne   permissions. How to Set Up   PingOne   Log in to   PingOne   as an Admin user. From the Dashboard, select   Connections   in the sidebar.   Click the   +   button   next to   Applications . Enter the application name (for example: “ PingOne   Worker API”)   In the   Choose Application Type   window select   Worker   and click   Save .   Ensure the   toggle switch is set to on   to   enable   the app. Select   Configuration .   Scroll down to   General   and   copy and save   Client   ID ,   Client Secret ,   and   Environment   ID .   Navigate to   Roles   in the   PingOne   Worker API   screen   and click   Grant Roles .     Select   Client Application Developer .   Select   Identity …

Overview This article covers the additional permissions required to integrate Google Workspace Posture SSPM into Grip. Prerequisites Administrator account for the Google Workspace tenant undergoing integration. Follow the Google Workspace Setup article steps We recommend reading the " Introduction to Posture Management " article to learn about posture at Grip. Required permissions Add permissions: Under   Project >>   Service Account   >> Project change the permissions to the below: https://www.googleapis.com/auth/cloud-platform.read-only,https://www.googleapis.com/auth/gmail.readonly,https://www.googleapis.com/auth/admin.directory.user.readonly,https://www.googleapis.com/auth/admin.directory.user.security,https://www.googleapis.com/auth/admin.reports.audit.readonly,https://www.googleapis.com/auth/admin.directory.group.readonly,https://www.googleapis.com/auth/admin.directory.domain.readonly,https://www.googleapis.com/auth/admin.directory.orgunit.readonly,https://www.googleapis.com/auth/apps.groups.settings,https://www.googleapis.com/auth/cloud-identity.policies.readonly …

Why Grip? Please listen to Lior Yaari explain what Grip is and the Value it Brings:

In the following video, you will learn about Grip’s ACTION section.

Overview The integration of Grip with Okta enables organizations to gain a comprehensive overview of their managed applications, including provisioning details and insights into sign-in and usage patterns. This collaboration enhances the ability to monitor and control access across the organization's application landscape, ensuring that all application interactions are transparent and managed efficiently. About Okta and OAuth Okta is an identity and access management (IAM) platform providing secure authentication, authorization, and single sign-on (SSO) capabilities for organizations. It is a standards-compliant OAuth 2.0 authorization server and a certified OpenID Connect provider, leveraging OAuth 2.0 for API security and user authentication.  OAuth 2.0 is a widely adopted authorization framework that allows secure access to resources on a third-party site without exposing your credentials. Prerequisites Create an Okta user profile. The user must have a first name, last name, email address, and department (Sales …

Overview This guide provides detailed instructions on integrating Okta with Grip using an API key. The integration allows Grip to leverage Okta's identity management capabilities, enhancing security by efficiently managing user access and permissions. Note. If you haven't completed the Okta Setup (API Key Based) step during Grip's historical discovery (sales) cycle, the initial set-up might be delayed during the live Okta SSPM deployment session with the Grip team. There are 2 options for creating an API token: Option A- As a Regular User (Faster) Share this article and ask the users to follow it as Okta admins , with their API Token Key and Okta domain . Only then, perform the Okta SSPM live deployment. Option B- As a Read-Only Service Account (Slower, Less Privileges) Creating an API token using a read-only service account is a more secure but slower process. This method involves additional …

...

...

In the following video, you will learn about Grip’s sidebar navigation options.

Overview This guide describes a step-by-step process to integrate Google Workspace (GW) SSO with Grip Security, enabling users to authenticate securely. Here, we will walk through the setup of a new SAML application in GW, including the necessary configurations. The Integration consists of two main steps: Create a New SAML Application in GW Configure SAML in the Grip Portal Integration Benefits Integrating GW SSO with Grip Security offers several benefits, including: • Simplified access for users via Single Sign-On (SSO). • Streamlined management of user authentication and provisioning. Prerequisites Access to the Google Workspace (GW) administration panel. Create a New SAML Application in Google Workspace To create the SAML in GW, you will first need to connect to Grip’s Admin panel and copy the “ Entity ID ” (1) , the “ Assertion Consumer Service” (ACS) URL” (2) , and the “ SAML Response Attribute ” (3) from “ Connect to Google Workspace SSO ” window. To …