Integrations
Identity and security event library adapters, plus unpublished Python framework adapters.
Identity and security event integrations ship as library adapters configured in Go code during a pilot, rather than through a user interface.
Identity
| Integration | Type | Purpose |
|---|---|---|
| OpenID Connect (OIDC) | library adapter | Generic identity federation used with Okta and Auth0 |
| Okta | library adapter | Status connector |
| Microsoft Entra ID | library adapter | Microsoft Entra Agent ID token validation |
| Amazon Web Services Identity and Access Management (AWS IAM) | library adapter | Agent role proof through Security Token Service (STS) caller identity, with configured allowed role Amazon Resource Names (ARNs) |
| Secure Production Identity Framework for Everyone (SPIFFE) / SPIFFE Runtime Environment (SPIRE) | library adapter | Enrollment with an X.509 SPIFFE Verifiable Identity Document (X.509-SVID) |
| CyberArk | library adapter | CyberArk Identity OIDC token enrollment |
SIEM
Security information and event management (SIEM) library exporters include:
| Integration | Type | Configuration or purpose |
|---|---|---|
| Splunk HTTP Event Collector (HEC) | library adapter | HEC URL and token |
| Datadog Logs | library adapter | API key and site |
| Microsoft Sentinel | library adapter | Workspace ID and shared key; default custom table SURADARAuth_CL |
| CrowdStrike Falcon LogScale | library adapter | SIEM event export |
| Palo Alto Networks Cortex XSIAM | library adapter | Event export to the Cortex XSIAM HTTP Collector |
| Common Event Format (CEF) | library adapter | SIEM event export |
| Open Cybersecurity Schema Framework (OCSF) | library adapter | SIEM event export |
| Fan-out exporter | library adapter | Sends to several exporters at once |
Agent frameworks
The Python software development kit (SDK) is version 0.1.0 and includes the adapters below. SDKs are unpublished and not available for distribution. Contact Glyphzero about a guided SURADAR pilot.
| Framework | Type |
|---|---|
| CrewAI | Python SDK adapter |
| LangGraph | Python SDK adapter |
Positioning
SURADAR works with OAuth 2.1, Model Context Protocol (MCP), SPIFFE and identity providers such as Okta. It adds a chain of custody on top of these primitives.
Not available
There is no SURADAR GitHub Action and no published Terraform provider.