Rapid7 Platform Login

Overview

InsightCloudSec now allows customers to take advantage of the ability to log in to your InsightCloudSec installation through the Rapid7 Insight Platform. This capability provides new and existing Rapid7 and InsightCloudSec customers with the opportunity to unify their access to Rapid7 tools in a single interface.

Note: This capability is supplemental to your existing login workflow, you can still use your domain-based login to access InsightCloudSec.

📘

Support Items to Note

SaaS-Only
Platform login is only available to InsightCloudSec SaaS (hosted) customers.

Just In-Time (JIT) Support
While InsightCloudSec does support Insight Platform logins using Just In-Time (JIT) User Provisioning, you will need to request that this capability be enabled as it is disabled by default. Reach out to your CSM or support to request that this be enabled.

Prerequsites

Email Requirements

• If an email address is in use by more than one user, you will not be able to log in.
• Email addresses within InsightCloudSec must be unique for a Platform login.

JIT User Provisioning

• Users logging in via the Platform must have an assigned InsightCloudSec role to login, this includes JIT.
• When JIT is implemented it will provision the user and assign it a role.
  • If the user's role has changed on InsightCloudSec or Platform those changes will not be reflected.
  • Changes to roles (role synchronization) will be implemented in a future update.

Getting Started - For Admins

A designated administrator is required to manage your Platform login. After receiving credentials you will need to log in to the Platform and establish access for the users for which you want to enable a Platform login.

Note: Platform Administrators and InsightCloudSec Administrators are entirely independent of one another. If you need administrative rights to the Platform, reach out to us through your CSM or through the Customer Support Portal.

Understanding Roles

Before creating users and assigning roles it’s important to understand the differences between Platform roles and InsightCloudSec roles. Role mapping between the Platform and InsightCloudSec is as follows:

• For details on managing users within the Platform check out Manage Insight User Access.

• For details on Users/Roles within InsightCloudSec refer to Users, Groups, and Roles (Identity Management) and also our User Entitlements Matrix.

Adding Users

Bulk Add/Import

Bulk import or adding multiple users is available if you have SSO enabled on the Platform. Refer to the Platform documentation for single sign-on for additional details.

Adding InsightCloudSec to an Existing User

Refer to the steps below to add InsightCloudSec as a tool to an existing Platform user:

1. From the Platform login page, select the “User Management” option.

2. Select the target user.

3. Under “Access”, select “Edit” in the Product Access section.

4. Select “InsightCloudSec” and then add either the desired User Group, or Individual User Permissions.

5. Click “Save” to apply these changes to the user.

Adding a New User for InsightCloudSec

Refer to the steps below to add a new InsightCloudSec user to the Platform:

1. From the Platform login page, select the “User Management” option.

2. Select “Create User” and then select “InsightCloudSec” as the product.

3. Add the User Details (First Name, Last Name, Email, Timezone) and select “Next”.

4. Add the User to a User Group if desired, or click “Manage Individual Permissions” to apply permissions individually for the user you’ve just created.

• Note: Each user you create will require a role to allow access.

5. After completing the required configuration, click “Save” to complete the setup for that user.

Getting Started - For Users

Users who have been provided with access to InsightCloudSec through the Platform will receive an email notification for their account creation.

Users will need their email address to login, not their InsightCloudSec username.

• Note: In some scenarios these may be the same depending on how your previous access was configured.

After logging in to the Rapid7 Insight Platform, select “Open” on the InsightCloudSec tile to access your InsightCloudSec Platform.

• Note: If you do not see a tile, reach out to your Platform Administrator.

This tile/button will navigate to a new URL, however the direct URL you’ve used previously to access your InsightCloudSec installation is also still available.

For details on managing your profile within the Platform refer to the Profile Settings Documentation.

Other Considerations for Users

Once you have confirmed access to InsightCloudSec we recommend validating that the email you are using is the same in your InsightCloudSec profile.

To view/update your email address do the following:

1. From the global menu, select "My Profile".

2. Scroll to the “Email Address” field, if your email address requires an update click “Edit” to enable editing and make any desired changes.