IEM FAQ

faqs q how do i enable identity exposure management? to enable identity exposure management, purchase a package and your csm will enable it from here create a sync with entra id to authorize your identity identifiers q how do i connect my idp? to connect your idp create an app registration within entra id and enter the client secret and client id within the docid\ z x8zdlsy7wd0c1jdpxg7 page q will this lock my accounts? password validation can lock accounts however, flare has built in mitigations to prevent this verify your company’s smart lockout policy to understand how long accounts are locked for default policy is one minute which would have minimal business impact q how do i verify or reset credentials? credentials can be verified by one of two ways, either by pressing validate or having the automation run flare does not reset credentials but sends a signal to a conditional access policy configured within the customer's tenant to reset the password q which remediation action should i chose? flare offers 3 different remediation actions mark user as compromised, disable the account, and revoke sessions each action comes with a different set of permissions flare recommends chosing the one that best implements with your companies workflow q does this work with a hybrid setup such as active directory and entra id? due to the nature of active directory and entra id writeback we recommend you do not use the disable user session remediation action when active directory performs the writeback operation it will re enable the account q what credentials are verified via credential validation? flare will automatically verify any credentials that are discovered after the identifier is created q what is the pricing? identity exposure management is available at an additional cost within your flare subscription reach out to your flare customer success representative for more information q what’s on the roadmap? flare has an exciting roadmap to continue to build out the blast radius, pull in more datapoints such as mfa, additional idps, cookie support and much much more stay tuned for the latest updates