elastic / elastic/integrations

[ping_directory] Add support of User and Group datastream

Open
#20,990 1 comment 0 reactions 1 assignee Claimed by @muskan-agarwal26 View on GitHub
documentation enhancement New Integration Team:SDE-Crest Team:Security-Service Integrations
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

Collects PingDirectory user identity and group membership records via the SCIM v2 API (CEL input). Covers user accounts (username, email, display name, title, user type) and groups (name, members, metadata).

Includes:

CEL data collection from /scim/v2/Users and /scim/v2/Groups (with /directory/v1/authenticate)
Ingest pipelines with ECS mappings (user.id, user.name, user.email, user.full_name, group.id, group.name, event.category, event.type)
Field definitions, pipeline and system tests, sample events, latest-user transform, and documentation
Dashboards covering user sync over time, users by department and employment type, group counts and memberships, groups over time, and top users.

Part of https://github.com/elastic/integrations/issues/19103.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.