Skip to main content

ZTXGate Integrations

ZTXGate is designed to work with the identity, endpoint-security, and monitoring systems an organization already operates.

Instead of replacing those systems, ZTXGate can use their signals as part of an access decision and keep enforcement close to the protected resources.

Device Posture Integrations​

Use supported MDM and EDR platforms as policy inputs for managed endpoints:

  • Microsoft Intune — use device compliance information in access policy
  • Microsoft Defender for Endpoint — use endpoint security and risk information in access decisions
  • CrowdStrike — incorporate CrowdStrike posture or risk information into ZTXGate policy
  • SentinelOne Singularity — use SentinelOne endpoint-security context as an access signal
  • Jamf — bring Apple device-management posture into resource access policy

These integrations complement ZTXGate's own device enrollment. Enrollment establishes the device identity used by ZTXGate; MDM and EDR integrations contribute additional information about the device's current state.

Identity Integrations​

  • OIDC & SCIM Identity Integration — authenticate through a compatible identity provider and synchronize user lifecycle information
  • Okta — combine OIDC, SCIM, supported step-up authentication, and SSF/CAEP security-event signaling

Security Operations​

  • SIEM & Security Event Export — forward relevant audit and security events using RFC 5424 syslog, ArcSight CEF, or JSON over supported transports

Connected and Isolated Deployments​

ZTXGate can operate without a mandatory CoreZT-hosted cloud control plane, including in fully air-gapped deployments. External integrations still retain their own connectivity requirements: an internet-hosted MDM, EDR, identity, or SIEM service must be reachable if it is part of the deployment.

Integrated ZTXBAS remains available inside air-gapped ZTXGate deployments when licensed, providing phishing-resistant biometric authentication without requiring a separate ZTXBAS server or an internet-hosted push service.

Start Free TrialExplore Identity & Device Trust