Envoy

Use Envoy data with Cortex XDR.

Important

This connector is only available for tenants that onboarded after July 26, 2026. For tenants that onboarded before this date, use Marketplace to access the standalone integration. For more information, see Marketplace.

This sub-capability is available with any active Cortex XSIAM, Cortex XDR, or Cortex AgentiX license.

Integrate with Envoy Identity Access Management (IAM) services to automate user provisioning and execute CRUD operations across employee lifecycle processes. The Envoy integration uses a set of API endpoints tested with version v2 of the Envoy SCIM API.

This connector includes the following sub-capabilities (Marketplace integrations link to PAN DEV for more information):

• Envoy IAM: Integrate with Envoy Identity Access Management services to execute CRUD operations to employee lifecycle processes.

To configure this connector, follow the steps outlined in the configuration wizard.