Provisioning & events

Keep other systems in step with your Trustaige directory, with SCIM provisioning, Shared Signals for security receivers, and webhooks for your audit stream.

Three ways to keep other systems in step with the directory, each for a different job. Not sure which you need? Start with one app or the whole organization?

SCIM

Trustaige runs a SCIM 2.0 server for each organization at /provision/{tenantId}/scim/v2/, so an HR system or another identity provider can create, update and deactivate people and groups. The hub issues the SCIM tokens it authenticates with. Trustaige can also push people and groups out to an app that speaks SCIM, from that app’s Provisioning tab.

Shared Signals

Trustaige transmits Shared Signals (CAEP) events, an open standard for telling a receiver that something changed about a person’s security: a session was revoked, a credential changed, a device fell out of compliance. Receivers find the transmitter’s configuration at /.well-known/ssf-configuration.

Webhooks

A webhook streams your organization’s audit events to an endpoint you own, in real time or on a schedule, as JSON, CEF, LEEF or OCSF. Each delivery is signed with HMAC-SHA256 and carries X-Event-Type, X-Event-ID and X-Webhook-Delivery-ID (use it to drop duplicates). A failed delivery is retried after 30 seconds and again after 5 minutes; after 10 failures in a row the webhook is turned off.