In addition to the ability to integrate with external services through the Management Console, Lookout CASB provides inbound integrations with external services based on APIs. These APIs enable administrators to identify authentication information for users, execute queries on a variety of factors including violations, activities, event types, content, and user IDs. For example, through these APIs, you can find out about how many anomalies have occurred over the last 30 minutes, or how many occurrences of a specific event occurred within the last hour. You can poll continuously for this data or extract it once.

In addition, you can extract profiles of users and their risk levels and create or update those profiles to enforce access limitations for high-risk users.

This document outlines the processes for

▪ onboarding API clients for integration with third-party services, and

▪ configuring APIs for authentication, event monitoring, content and user insights, and viewing creating, or updating profile information based on user risk level.