Cloud Portal

Manage portal users, roles, and invitations

Invite local portal users, assign Owner/Admin/Analyst/Viewer roles, complete set-password, validate access, and remove access safely.

SSO and SCIM enterprise identity

Understand SSO authentication and SCIM lifecycle provisioning, configure the current preview safely, and explain the customer value.

Audit Logs in the Cloud Portal

Search, validate, export, and retain organization-scoped administrative audit history.

Directory and identity

One Administration hub for organizational directory and portal sign-in - SSO/SCIM for people, Agent One Active Directory follow for device inventory. Credentials stay separate.

Deployment Center

Download entitled endpoint installers, enroll devices with your organization license key, and validate successful deployment.

Session control for operators

Configure idle session guidance and revoke portal sessions for privileged operators.

Active Directory follow - scenarios and conflicts

What Active Directory follow does and does not inherit, how multi-reader merges resolve, how tags interact with the OU tree, and why portal sign-in stays on SSO/SCIM.

Follow Active Directory for devices and policy

Configure LDAPS in the portal. Domain-joined Windows stations read the directory and upload snapshots. The AD panel shows sync health and the OU tree; Managed by TAO and Directory reader badges appear on the fleet lists.

Security Policies hub

Navigate entitled policy areas, edit profiles bound to tags, and apply seat-gated modules to the right stations.

TAO deployment branches and auto-update

Prod and eval branches, Latest/Previous targeting, and quiet auto-update for Windows and Linux TAO agents.

Critical alert routing

Configure email and webhook routing for critical portal alerts without treating retries as guaranteed delivery.

Tags, profiles, seats, and Policy Bundles

Assign modules by seat count, bind profiles to tags or Policy Bundles, and target stations so only licensed endpoints receive each module.

How TAO agent sync and updates work

Heartbeat interval, Pull now, portal Sync / Update commands, and what to expect after wake from sleep.

TAO endpoint hardening

Configure Windows agent uninstall, service-stop, UI protections, and portal check-in interval.

Policy history and rollback

Review policy history snapshots and roll back entitled module policies when a change needs to be reversed.

Managed devices and software inventory

Organize the fleet with folders and tags, monitor enrolled endpoints, request inventory scans, and manage baselines.

Evidence retention and audit integrity

Set evidence and audit retention preferences, preview purge impact, and export audit JSONL with SHA-256 integrity headers.

Security Assurance readiness

Use Security Assurance to track MFA, SSO staging, alerts, and audit export readiness - not SOC 2 certification.

Activity Log

Search and export cross-module operational activity for investigations and review.

Log Forwarding

Forward selected portal audit events to syslog or an HTTPS webhook and validate delivery.

Customer API

Turn on a read-only Cloud Portal API for scripts and for an AI assistant. A code is required on every new conversation.

Manage your account and MFA

Review portal identity details, enroll MFA, manage factors, and sign out securely.

Pulse

Ask Pulse a short question inside the Cloud Portal. The answer is assembled there from records this organization already keeps.

Support Center

Open, track, and securely communicate through Cloud Portal support tickets.

Signal (renamed to Pulse)

Signal was renamed to Pulse. This page points readers to the current guide.

Ask (renamed to Pulse)

Ask was renamed to Pulse (via Signal). This page points readers to the current guide.