Learn how to configure your new Clarity Security instance!
Estimated time to complete: 15-30 minutes
A Clarity Security tenant
Note: If you do not know your Clarity Security URL reach out to your account rep or email@example.com
Admin access to Clarity Security
Note: If you are unable to sign in for any reason, please call support at 979-398-5512.
Step 1 - Login to Clarity Security
Step 2 - Connect to Your First Application
2. Select Add New Application
3. Select an application to connect with.
We recommend starting with a Source of Truth application such as an HR Application, Directory Service, or Enterprise Resource Platform.
For more information on Sources of Truth - See the main Source of Truth Document
4. Open the related documentation found here - Application Integration Index.
5. Once the application connection is in place, continue to Step 3!
Step 3 - Unify found identities
Unified Identity - A Unified Identity is a single Identity listing in Clarity. This listing is the combination of the dispirit Identities found in downstream enterprise Applications. Unified Identities are the outcome of the Identity Unification process.
Identity Unification - A core component of the Clarity platform is Identity Unification. As Applications are connected to the Clarity platform, Identities and Entitlements are ingested. Clarity automatically reconciles the Identities using Service Identifiers, GUIDs, email addresses, and UPNs.
1. In the sidebar > click Notifications
2. Review the notifications that are present.
3. What is a notification?
Notifications are comprised of four core elements:
The type of alert.
The service or application that generated the alert.
The affected user.
Remediation options (see next item)
4. Choose the appropriate remediation option.
Option 1: Grant to Identity
This option is used when there is an existing identity in Clarity that matches the alert.
To find the matching identity > Click the Drop Down > Search for the Existing Identity > Click Grant to Identity
Option 2: Create New Identity
Use this option if an identity is found that does not exist in Clarity & the identity will be managed by Clarity.
Click Create New Identity
Complete the form > Click Create
For more instructions, refer to How to Provision an Identity
Option 3: Ignore
This option is often used when the alert is associated with a service account that isn’t managed by the Clarity platform.
Option 4: Deactivate
Deactivate should be used with caution! If provisioning is enabled (it is by default), clicking deactivate will tell that application to deactivate the found identity.
4. Complete the above process for the remaining alerts.
Step 4 - Run a User Access Review
This is an optional step, but it is highly recommended for companies that are new to Identity Governance.
We have found companies recuperate unused licenses, identify orphaned accounts, and reduce risk.
1. In the sidebar > click Access Review
2. Click Create New Access Review.
3. Configure the New Access Review > Create
Name: Initial User Access Review
Type: Full User Access
Assign To: Automatic
Time to Complete: 14 Days
Start Date: Dependent
Default Reviewer: Select an Admin
4. Once redirected and Start Date has passed, reviewers can view their review.
Support Contact Information
Call your customer success team.
Open a ticket here -https://claritysecurityhelp.zendesk.com/hc/en-us/requests/new
Call 979-398-5512 – Monday through Friday – 8:00 AM-6:30 PM CST