Using Kolide’s Authentication Webhooks

You can use Kolide’s webhooks for automating actions that are triggered from Kolide.

This guide will use Kolide’s webhooks to demonstrate a setup you can use to extend a users Slack session. In our scenario, we will:

• Set up an automation service. (such as Workato or Zapier)
• Create a webhook within Kolide that is subscribed to auth_logs.success.
• Configure our Slack settings to utilize the webhook and automation service.
• Set up a workflow that extends the users Slack session upon a successful authentication.

Step 1: Set up an automation tool or a service to receive the webhook. This can be a service such as Zapier or Workato. We just need something that will massage out the nested data our API returns, since Slack only accepts data in a specific format.

Step 2: Set up a new webhook that is subscribed to the auth_logs.success event in Kolide. We have more documentation here, or you can follow along with the screenshots below!