Skip to content
FIVEGUARDIAN5DOCUMENTATION
/
Español Open the panel
Premium modules

Integrations

Identity provider sync, event streaming and EDR: what each integration does, how it is configured and its status.

Integrations live under Integrations in the panel and are part of the premium modules. Event Streaming configuration is already available; event delivery, EDR checks and identity provider sync are being rolled out. Contact Support for availability.

Identity Provider Sync

Automatically syncs users and groups from the organization's directory. When a person joins or leaves the company or changes department, their access in FiveGuardian5 is updated without manual work. Supported providers: Google Workspace, Azure AD/Entra ID, Okta, generic SCIM and JumpCloud.

Setting up Google Workspace

The panel wizard guides you through these steps, which a Google Workspace administrator must perform:

  1. In Google Cloud Console, create a project named FiveGuardian5.
  2. In that project, enable the Admin SDK API.
  3. Create a service account named FiveGuardian5, with ID fiveguardian5.
  4. Create a JSON key for the service account and download it.
  5. In the Google Workspace admin console, create an admin role named User and Group Management ReadOnly with the Admin API privileges Users › Read and Groups › Read.
  6. Assign that role to the service account's email.
  7. In the panel wizard, upload the JSON key and complete the requested details.
The JSON key grants read access to your directory. Store it securely, do not send it by email or chat, and delete local copies after uploading it. If it is exposed, revoke it in Google Cloud Console and create a new one.

Other providers

For Azure AD/Entra ID, Okta, generic SCIM and JumpCloud, the wizard asks for equivalent credentials or connection details from the provider. Always use read-only permissions on users and groups. If you need one of these providers, contact Support to coordinate the setup.

Event Streaming

Sends FiveGuardian5 activity events to an external platform for analysis or retention. Supported destinations: Datadog, Amazon S3, Amazon Firehose and generic HTTP (any service that receives events over HTTPS).

  • Destination configuration is already available in the panel.
  • Actual event delivery is being rolled out.
  • Use credentials that only allow writing to the destination.
  • Remember that events can include user and device names: the destination must meet the same security and HIPAA requirements as the organization.

EDR

Connects FiveGuardian5 with your endpoint detection and response (EDR) platform to use each device's security status as an access condition. Supported platforms: CrowdStrike, Intune, SentinelOne, Huntress and FleetDM.

Once active, the integration lets you require, through posture checks, that only managed and healthy devices according to the EDR access certain resources. This feature is being rolled out; before applying it, test it with a pilot group so legitimate devices are not blocked.