Schedule & events

Date: October 8th
Time: 11:00am ET
Location: Microsoft Teams Townhall

Identity Defense now provides API access to detections, risk signals, and Tier Zero indicators, making it possible to extend visibility and response workflows beyond the management console. In this Skills 101 session, we’ll walk through how the API can be used to integrate Identity Defense data into existing security operations, reporting workflows, and automation platforms.

We’ll explore:

• Available API endpoints and the types of detection, risk, and Tier Zero data currently exposed
• Understanding authentication, API scopes, and rate limits in practical terms
• Pulling Identity Defense data into external platforms such as SIEMs, dashboards, and reporting tools
• Using the API to support automated triage, external workflows, and response-driven integrations
• Common integration patterns for custom reporting, security operations, and workflow orchestration

By the end of the session, you’ll have a practical understanding of where the Identity Defense API fits within a broader security ecosystem and how to begin building integrations that extend visibility, investigation, and response capabilities outside the console.

Speaker: Victor King, Technical Product Manager and Matthew Vinton, Product Manager