Skip to content

x-pack/filebeat/input/entityanalytics/provider/okta: add enrichment to obtain supervises relationship #49781

Description

@chemamartinez

We want to populate the new ECS field user.entity.relationships.supervises with the list of values that an entity supervises or manages.

Downward relationship are not natively exposed in the Okta API, Okta stores manager references on the subordinate, not the manager. This requires one additional API call per user

Supervises field can be added with a new search per user where we obtain all users that are managed by them (search=profile.managerId eq "userId"), followed by injecting a supervises field before publishing every user.

Enabling this new enrichment would mean a new request per user, taking into account the Okta rate limits, this option should be optional and disabled by default.

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions