Webex Notification Integration

02/2024

Overview

Oort can integrate with Webex to provide notifications and in some cases automation of frequently recurring identity tasks.

Goal

The goal of this document is to walk through configuration of a Webex space as a notification target and test notifications from one or more Oort identity health metrics.

Audience

This document is intended for identity security, IAM, and IT administrators responsible for integrations between identity, security, and collaboration platforms, including notifications, alerting, and incident remediation.

Next Steps

After Webex integration is complete, notifications can be tuned to meet your specific organizational needs.

Webex Integration

To enable Webex integration, you will need to add the Cisco Identity Intelligence Bot for Webex to your Webex space and send an invite message to the bot.

Permission requirements within Webex

By default, any space moderator member can add people (and bots) to a space.

High-level Setup Steps

There are 3 steps you need to go through to set up the Webex integration with your Oort tenant.

  1. Add the Cisco Identity Intelligence Bot to your Webex space

  2. Send an invite message to the bot from the Webex space

  3. Enable the Webex notification as a target in one or more Oort health checks

Add Cisco Identity Intelligence Bot to Webex

To add the Cisco Identity Intelligence Bot to Webex, perform the following steps.

  1. Login to the Oort Dashboard

  2. From the Integrations tab, click on Add Integration

  3. From the Notification Targets list, select Add Webex Target

  4. Copy the Cisco Identity Intelligence Bot username

  5. Add the Cisco Identity Intelligence Bot to your Webex space by inviting the bot username to the Webex space

  6. Click Generate Configuration Message to generate the bot invite message

  7. Copy the invite message shown on the page

  8. Mention the bot in your Webex space followed by the copied invite message

Configure Webex Notification Target Details

Webex will send the invite message to Oort, which will create a new Webex notification target, and send a message to the Webex space when setup is complete. The Webex notification target name will be the name of the Webex space it was added to.

After getting a message stating the notification target has been added to your Cisco Identity Intelligence account open the Integrations page in Oort to view the new Webex notification target. You may need to refresh the list of integrations to see the new notification target.

You can update the Webex notification target Name, Description (optional) and the use of this target.

  • Uses can be a combination of Failed Check and Data Collection.

    • Failed Check means the notification target will be notified after checks are evaluated with the failed check results.

    • Data Collection means the notification target will be notified after a manually-triggered collection of an integration ends, or whenever a manual or scheduled data collection fails with an error.

Click Save in the upper right corner of the screen.

Enable Notifications via Webex for a Health Check

The next, optional, step is to enable Webex notifications for one or more checks. A notification target should be configured to be notified for specific checks to be operational.

Navigate to the Checks page from the left side menu and then click on a specific Check type, such as Weak MFA Configured.

On the right side of the page, check the box to enable notifications for the Webex notification target you configured.

The Webex workspace will now show as enabled for that Check type.

Test Webex Notifications

To test Webex notifications, return to the specific Check page and expand the Check Settings on the right side of the page. Click Test next to the Webex notification target.

Within the configured Webex space, you will see the notification from the Cisco Identity Intelligence Bot.

Adding Multiple Webex Spaces

To add more than one space as a notification target, repeat the process above starting with Add Integration to add a new Webex notification target.

Within each individual Check details pane, you will be able to pick one or more Webex target integrations.

Removing the Cisco Identity Intelligence Bot from a Webex space

Should it be necessary to delete the Cisco Identity Intelligence Bot from your Webex space follow the following steps:

  1. Login to the Oort Dashboard

  2. From the Integrations tab, click on the three dots menu next to the Webex notification target you with to delete

  3. Click Delete

Last updated