NEWFlows V2 has been releasedSee what shipped
INTEGRATIONSSECURITY
CR
CrowdStrike28 OF 28 CAPABILITIES ASSESSED

Who can reach your Falcon console, and with which roles

CrowdStrike Falcon console and API users and the Falcon roles they hold, with users created and removed from Ploy.

TYPE · SECURITYAUTH · OAUTH CLIENT CREDENTIALSDOMAIN · CROWDSTRIKE.COM
CrowdStrike connectorHOURLY SYNCCAPABILITIES
WHAT PLOY DOES
Sync Falcon usersEvery console and API user in the Falcon tenant arrives in Ploy as an identity, with their login and name.
READ
Read Falcon rolesEach Falcon role a user holds rides as the entitlement on the tenant, so several tenants stay separate.
READ
Spot inactive usersInactive Falcon users show as inactive and lose their access in Ploy.
READ
Create usersPloy creates a Falcon user with the person's email as their login. CrowdStrike emails them an activation link, and an admin assigns roles in Falcon.
WRITE
Remove usersPloy deletes the user from the Falcon tenant. Removing someone who is already gone counts as done.
WRITE
2.1WHAT IT UNLOCKS

Three jobs this connector does on day one

JOINERS

A Falcon login for the new analyst

The onboarding flow creates the Falcon user, and CrowdStrike sends them the activation email.

REVIEWS

Falcon roles in the same campaign

Roles sit beside the rest of the estate, so a reviewer sees who holds Falcon Administrator and who only reads.

LEAVERS

Out of the console on the last day

Offboarding deletes the Falcon user, and the change shows in Ploy straight away.

2.3

SETUP

TYPICALLY 10 MINUTES
STEP 01

Create an API client

In the Falcon console, create an API client for Ploy with User management Read. Add User management Write if Ploy should create and remove users.

STEP 02

Connect the tenant

Pick the cloud region your Falcon console runs in, then enter the client ID and secret. For a Flight Control parent client, also enter the child CID to connect.

STEP 03

Watch the first sync

Users and their Falcon roles land in the graph.

2.4OFTEN CONNECTED TOGETHER
OktaIDENTITY SOURCETessianSECURITYSlackAPPROVALS
BROWSE ALL 93 INTEGRATIONS

Connect CrowdStrike, see it in 10 minutes.