Vendor configuration
The Abnormal Security source requires an authentication token. Please follow the steps below to acquire the token.
Log in to the Abnormal Security platform.
In the Manage section, select the Settings option.
In the Settings section, select the Integrations option.
Scroll down to the Additional Integrations section and click "+ Connect" on the Abnormal REST API card to open the integration page for your organization.
Enter the below IP address for your deployment in the IP Safelist field.
a) 52.76.252.34
Copy and save the Access token.
Integrating with RH HRM Portal (Guidance will be provided during the On-boarding session for the following steps).
Log into your RH Cyberready portal and navigate to the HRM → Settings section as indicated below:
Click on Abnormal Widget → View Configurations and the following Modal will appear.
In the Modal above, use the API URL from the dropdown.
Add the Token that you have copied in an earlier step to this space in the designated places.
Click on Save and Authorize.
Navigate to the second tab: Detection rules as indicated below.
Select the events that you would like to enable for sending the nudges to users.
Please refer to this article for the next steps in configuring the mapping attributes.