Beyond the controls inZero Trust, you can nowexchange user risk scores with Okta to inform SSO-level policies.

First, configure Cloudflare One to send user risk scores to Okta.

1. Set up theOkta SSO integration.
2. InCloudflare One ↗, go toIntegrations >Identity providers.
3. InYour identity providers, locate your Okta integration and selectEdit.
4. Turn onSend risk score to Okta.
5. SelectSave.
6. Upon saving, Cloudflare One will display the well-known URL for your organization. Copy the value.

Next, configure Okta to receive your risk scores.

1. On your Okta admin dashboard, go toSecurity >Device Integrations.
2. Go toReceive shared signals, then selectCreate stream.
3. Name your integration. InSet up integration with, chooseWell-known URL.
4. InWell-known URL, enter the well-known URL value provided by Cloudflare One.
5. SelectCreate.

SentinelOne signal ingestion

You can now configure apredefined risk behavior to evaluate user risk score using device posture attributes from theSentinelOne integration.