hydden.docs

#

This article describes what you need to do to get started with Hydden.Control. All initial steps are described on this page.

• Prerequisites - Ensure the Prerequisites below are met.
• Initial setup steps:
  • Creating your organization
  • Logging in for the first time.
• Preparing the first data sync:
  • Create your Integration with your Hydden.Discovery tenant.
  • Run your Data Sync.

Prerequisites

Data Sources/Collectors

To use Hydden.Control, customers must have a Hydden.Discovery Platform tenant with configured data sources for an access review.

API Token

To be able to establish an integration between the Hydden Discovery Platform and UAR, you need to create an API Token in the Hydden Discovery Platform to be used for the data sync authentication.

1. In your Hydden Discovery Platform tenant, navigate to __Configuration

   Access__ and select the API Tokens tab.

2. Click + Add API Token.
3. On the Add API Token modal, enter
   • a Name for your token, for example MyOrg.AccessReview.
   • click the generate secret button.
   • modify the default expiration date based on your organization’s policy.
4. Click Add.

Creating Your Organization

1. After navigating to add product URL here for the first time, click the Create Organization button.
2. On the modal,
   • for Tenant Name provide a name for your organization, for example, DemoCorp.AccessReview.
   • select your authentication provider, the options are Microsoft, Google, Okta, and PingIdentity.

3. On the provider modal, based on credential provider, enter for

   Microsoft	Google	Okta	PingIdentity
   - Azure AD Tenant ID - Client ID - Client Secret	- Client ID - Client Secret	- Domain - Client ID - Client Secret	- Domain - Client ID - Client Secret

4. Enter the Redirect URI (for testing), mainly needed for testing purposes of none production environment.
5. Enter Allowed Email Domains for login validations.
6. Click Test Connection, if the test is successful finalize your organization setup by creating the tenant, otherwise fix your connection setting and test again.
7. Click Create Tenant.

Logging in

1. Enter your business email address used for authentication.
2. On the auth provider user modal, select the account that is authorized and you want to use for your work in UAR.

Setting up Your Hydden Integration

1. Navigate to Settings.
2. On the Integration tab, enter the Hydden URL for your Hydden Discovery Platform tenant.
3. For the Client ID, in your Hydden Discovery Platform tenant, navigate to your previously created API Token and copy the Access Token. Paste the value into the Client ID field for the integration.
4. For the Client Secret, in your Hydden Discovery Platform tenant, navigate to your previously created API Token:
   • Click the edit button.
   • Recycle the secret, by clicking the generate/recycle button.
   • Copy the Secret, click Update on the edit module.
   • Back in your UAR tenant, paste the secret value into the Client Secret field for the integration.
5. From the Hydden Target Platform drop-down, select the target platform for this integration, most likely Hydden Discovery Platform at this time.
6. Click Save Settings.

Data Sync

1. After setting up the integration, navigate to the __Settings

   Data Sync__ tab.

2. Click the Sync All Data for the initial data synchronization.

To check on the status of your data sync, select the Job History tab. After a successful synchronization, you can look at the data under Accounts, Owners, and Groups.