Documentation
Configure OrthalonDiscovery Connectors

Discovery Connectors

Configure Enterprise identity, SaaS, CASB, Secure Web Gateway, and browser-management discovery sources.

Plan requirement: Enterprise organization administrator.

Connectors enrich Orthalon's AI application discovery by continuously importing asset inventory and usage signals from existing enterprise identity, network, and SaaS providers. All credentials are encrypted at rest with AES-256-GCM.

1. Supported Discovery Connectors

CategorySupported ProvidersImported Signals
Identity & SSOGoogle Workspace, Microsoft Entra ID, OktaActive user counts, authorized OAuth apps, AI client scopes
SaaS & ProductivitySlack Enterprise, GitHub EnterpriseInstalled AI integrations, bot actors, workspace apps
Secure Web Gateway & CASBCloudflare Gateway, Zscaler, Netskope, Microsoft Defender, Palo Alto Prisma, ibossIngress/egress AI traffic, domain requests, aggregate employee count
Browser ManagementChrome Enterprise CoreSuspicious domain visits, unmanaged extension telemetry

2. Quick Setup by Provider

Google Workspace

  1. In Google Cloud, enable the Admin SDK API on a project with Domain-Wide Delegation.
  2. Authorize scopes: admin.directory.user.readonly and admin.directory.user.security.
  3. In Orthalon, enter the Service Account Email, Private Key (PEM), Delegated Admin Email, and Customer ID.

Microsoft Entra ID

  1. Create an App Registration in your Entra ID tenant.
  2. Grant Microsoft Graph application permission: Application.Read.All (and tenant admin consent).
  3. In Orthalon, enter the Directory (Tenant) ID, Application (Client) ID, and Client Secret.

Okta

  1. Create an API Service App with scope okta.apps.read (or create a scoped API token).
  2. In Orthalon, enter your Okta Domain URL (https://company.okta.com) and API Token.

Cloudflare Gateway & Zscaler

  • Cloudflare Gateway: Enter Account ID and an API Token with Account.Gateway:Read.
  • Zscaler: Enter your Zscaler Cloud Hostname (zscaler.net) and authorized Web Insights Bearer Token.

3. Testing and Sync Verification

  1. Save the connector under Administration → Enterprise Controls → Encrypted Connectors.
  2. Click Sync to trigger the initial background discovery job.
  3. Confirm the status updates to CONNECTED.
  4. Open Discovery → AI App Discovery to review newly matched shadow AI applications and employee adoption metrics.

SSO and SCIM

Configure verified-domain OIDC or SAML sign-in and Enterprise SCIM provisioning for an Orthalon organization.

Organization, members, and billing

Manage Orthalon organization settings, member access, administrator roles, seats, and subscriptions.

On this page

1. Supported Discovery Connectors2. Quick Setup by ProviderGoogle WorkspaceMicrosoft Entra IDOktaCloudflare Gateway & Zscaler3. Testing and Sync Verification