Drata - Security Awareness Training Integration

This integration allows CanIPhish to continuously stream employee training certificate of completions into your Drata account to automate Drata security training compliance checks.

To get started, please follow the steps outlined below.

Table of Contents

• Step 1. Create An API Key In Drata
• Step 2. Configure The Integration In CanIPhish
• Frequently Asked Questions

Step 1. Create An API Key In Drata

1. Login to your Drata account.
2. Go to the Settings page on Drata. To access settings, select your account on the bottom left side navigation and then the Settings option.
   
3. Click API Keys on the Settings page.
   
4. Click the Create API Key button.
   

5. Create an API Key with the following Attributes:

   • Details Section:
     • Name: CanIPhish Drata Integration
     • Expiration: Never Expires
     • Allowed IP Address: Leave Blank

   

   • Scopes Section:
     • Access: Custom
     • Personnel:
       • List Personnel: Ticked
       • Get Personnel: Ticked
     • Users:
       • List User Documents: Ticked
       • Create User Document: Ticked

   

   

   

6. Click the Save button.
7. Copy the API Key to your clipboard or paste it into a notepad as we'll need it in the next step. Once stored, tick the "I have stored this API key information in a secure location" checkbox, and then click Done.
   

Step 2. Configure The Integration In CanIPhish

1. Login to your CanIPhish account.
2. Go to the Platform Settings page.
3. Scroll down and click the Integration Settings button.
   
4. Click the Setup Integration button on the Drata row.
   
5. In the popup that appears, paste the API Key copied at the end of Step 1.7. In the API Region, select the region that your Drata tenant is located in and then click the Activate Integration button.
   Note:  If you're unsure which region your Drata tenant is located in, please contact your Drata Account Manager
   
6. You're all done! The integration is complete. CanIPhish will immediately initiate a one-time sync to upload all existing certificate of completions for all employees. This may take anywhere from 1 to 10 minutes to complete. Afterwards, certificates of completion are uploaded in real-time as they are obtained by employees.

Frequently Asked Questions

What Happens If I Disconnect And Reconnect The Integration?

If you previously had a successful integration and you disconnect and then reconnect it, you will be presented with an additional configuration during the updated setup. You will be asked if you'd like to sync all certificates or just new certificates. If existing certificates were previously uploaded, then select to only sync new certificates (otherwise duplicate certificates may be uploaded). If existing certificates weren't previously uploaded, then select to include all certificates.