Setting up ATR for Okta

When ATR detects an Okta account has been compromised, Barracuda XDR automatically responds by suspending the affected account through the API. This suspension restricts access and triggers session invalidation, helping to contain threats in real time.

You must have:

• Access to the Okta Admin Console with an account that has the appropriate rights to create API tokens

• Access to the Barracuda XDR Dashboard set up and working properly

1. Log in to the Okta Admin Console.

2. In the left navigation menu, click Security > API.

3. Click the Tokens tab.

   Open

   

4. Click Create token.

5. Type a name for your token.

6. In API calls made with this token must originate from, select Any IP.

7. Click Create Token.

   Open

   

   
   
   

1. In Barracuda XDR Dashboard, select Integrations .

2. On the Okta card, click Update.

   Open

   

3. Select the Auto Remediation Enabled check box.

   Open

   

4. Click Test to verify the integration is working properly.

5. Click Save.