OneLogin Notification

This plugin receive and post notifications from OneLogin Webhook. Inspired on https://github.com/onelogin/serverless-onelogin-slack

For now it only parses the user login and check the configured risk threshold and then post a message in the specified channel

Configuration

Mattermost side

• Install the plugin
• Configure the plugin:
  • in the TeamChannel field add a the team and the channel you want to post the messages separated by comma. ie. TeamA,ChannelX.
  • set the RiskThreshold the value is from 0 to 100.
  • set the Username which is the user the will be use to post the messages.
  • set the Token this will be used to set the webhook header in the OneLogin side in order to validate the request.

OneLogin side

• Create the webhook and set the Header X-OneLogin-Token with the value you created in the Mattermost configuration, see above.

Events Supported

• USER_LOGGED_INTO_ONELOGIN
• UNLOCKED_USER
• CREATED_USER
• DEACTIVATED_USER
• DELETED_USER
• USER_LOCKED
• USER_REMOVED_OTP_DEVICE

Next features

• add slash command to block user
• parse other events types