Attackers don’t just target endpoints. They target identity platforms because access is everything.
With BitLyft AIR® v1.21, we’re expanding identity threat detection and automated response for OneLogin environments, helping teams spot risky identity behavior sooner and act faster when it matters.
What’s New in BitLyft AIR® v1.21:
Stronger Identity Visibility in OneLogin
This release adds new OneLogin security detections designed to surface the identity activity that often leads to breaches, including:
- MFA being disabled on user accounts
- Repeated failed authentication attempts
- Privilege escalation and role changes
- Password resets on privileged users
- Risky application assignment changes
- API token creation or modification
- Suspicious deprovisioning events
Instead of more logs, AIR® highlights high-risk identity behavior that security teams need to act on.
Automated Response for Compromised OneLogin Accounts
Detection is only useful if teams can respond quickly. That’s why v1.21 introduces a OneLogin Compromised User Account playbook, built to guide and automate response actions when identity threats are detected.
What teams gain:
- Faster containment of identity incidents
- Consistent response without manual guesswork
- Less time spent triaging repetitive alerts
Faster Time-to-Value with Built-In Automation
New out-of-the-box automation mappings connect OneLogin detections directly to remediation actions, no custom scripting required.
This means:
- Faster response
- Fewer handoffs
- More predictable outcomes
Security teams using OneLogin gain improved visibility into identity activity that commonly leads to incidents, along with faster and more consistent response through built-in automation. The combination of targeted OneLogin detections, automated response playbooks, and out-of-the-box automation reduces manual triage, shortens response time, and strengthens identity security coverage without adding operational complexity or additional tools.
See BitLyft AIR® v1.21 in Action
Want to see how identity detections turn into automated response? Schedule a 15 minute demo.
By
·
1 minute read