Identity Providers
Identity provider event sources allow SIEM (InsightIDR) to ingest and correlate user and group directory data. These event sources support accurate user attribution by enriching detections and investigations with identity context. SIEM (InsightIDR) uses this data to unify user records across multiple directories and improve visibility throughout the platform.
IDS Event Sources
Rapid7 can integrate with the following identity providers to ingest user data in SIEM (InsightIDR) and the Command Platform (Insight Platform):