{"id":2282,"date":"2026-05-06T12:07:43","date_gmt":"2026-05-06T11:07:43","guid":{"rendered":"https:\/\/ws-sup.fi-s.seravo.com\/?page_id=2282"},"modified":"2026-05-22T17:12:39","modified_gmt":"2026-05-22T14:12:39","slug":"elements-identity-security","status":"publish","type":"page","link":"https:\/\/support.withsecure.com\/en\/quick-start\/elements-identity-security\/","title":{"rendered":"Elements Identity Security"},"content":{"rendered":"<section\n    class=\"wp-block-support-banner edwp-block wp-block-support-banner--bg-light-gray layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n            <div class=\"wp-block-support-banner__container\">\n        <div class=\"wp-block-support-banner__content-wrapper\">\n                        <div class=\"wp-component-content wp-component-content--default wp-block-support-banner__content\">\n            <h2 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Getting started with WithSecure\u2122 Elements Identity Security<\/h2>                    <div class=\"wp-component-content__inner\">\n                                    <div class=\"wp-component-content__content wysiwyg\">\n                        <div class=\"wp-component-paragraph \">\n    <p>Follow the steps below to get started with using WithSecure\u2122 Elements Identity Security.<\/p>\n<\/div>\n                    <\/div>\n                                                            <\/div>\n                <\/div>                            <div class=\"wp-block-support-banner__searchbar wp-block-support-banner__searchbar--centered\">\n                    <div class=\"addsearch-standalone-searchbar-container\" style=\"--addsearch-searchbar-max-width: 600px;\"><\/div>\n                <\/div>\n                                <\/div>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-accordion edwp-block layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-accordion__container\">\n        <div class=\"wp-block-accordion__box\">\n                        <div class=\"wp-block-accordion__items\">\n                <div class=\"wp-component-accordion-item row-load wp-component-accordion-item--default wp-component-accordion-item--overlap js-wp-component-accordion-item-group\">\n            <div class=\"wp-component-accordion-item__item js-wp-component-accordion-item-item is-active\">\n                        <button\n                id=\"block_f10abea144b954bdff90662534cbbe1f-accordion-summary-0\"\n                class=\"wp-component-accordion-item__title js-wp-component-accordion-item-title\"\n                type=\"button\"\n                aria-expanded=\"false\"\n                aria-controls=\"block_f10abea144b954bdff90662534cbbe1f-accordion-0\">\n                <span class=\"wp-component-accordion-item__inner-title\">\n                                                            <span>Step 1 \u2014 Create your WithSecure\u2122 Business Account<\/span>\n                <\/span>\n                <div class=\"wp-component-accordion-item__toggle\">\n                    <svg class='edwp-icon edwp-icon--lrg js-icon wp-component-accordion-item__toggle__icon' aria-hidden='true'>\n                <use xlink:href='#chevron'><\/use>\n            <\/svg>                <\/div>\n            <\/button>\n            <div\n                id=\"block_f10abea144b954bdff90662534cbbe1f-accordion-0\"\n                class=\"wp-component-accordion-item__content js-wp-component-accordion-item-content\"\n                aria-labelledby=\"block_f10abea144b954bdff90662534cbbe1f-accordion-summary-0\"\n                role=\"region\">\n                <div class=\"wp-component-accordion-item__content__inner\">\n                    <div class=\"wp-component-accordion-item__content__box\">\n                        <div class=\"wp-component-paragraph wp-component-accordion-item__content-text\">\n    <p class=\"prose\">You need a WithSecure\u2122 Business Account to access <a href=\"https:\/\/elements.withsecure.com\" target=\"_blank\" rel=\"noopener\">Elements Security Center \u2197<\/a>, the unified management platform for all WithSecure\u2122 Elements products. There are two scenarios:<\/p>\n<ul class=\"bullet-list\">\n<li>When you purchase the product from a WithSecure partner, the partner typically creates a Business Account for the first administrator in your organization. You will have received an email from WithSecure with a temporary password and a link to log in.<\/li>\n<li>If your account has not yet been created but you have received a subscription key from your partner, go to\u00a0<a href=\"https:\/\/elements.withsecure.com\/self-register\" target=\"_blank\" rel=\"noopener\">elements.withsecure.com\/self-register \u2197<\/a>\u00a0to create one.<\/li>\n<\/ul>\n<div class=\"info-box\"><strong>Prerequisite:<\/strong>\u00a0Elements Identity Security requires\u00a0<strong>Elements Endpoint Detection and Response<\/strong>\u00a0to be configured first. If you haven&#8217;t done this yet, follow the\u00a0<a href=\"https:\/\/support.withsecure.com\/en\/quick-start\/elements-endpoint-detection-and-response\/\">EDR quick start guide \u2197<\/a>\u00a0before continuing.<\/div>\n<\/div>\n                                                                                            <\/div>\n                <\/div>\n            <\/div>\n        <\/div>\n            <div class=\"wp-component-accordion-item__item js-wp-component-accordion-item-item\">\n                        <button\n                id=\"block_f10abea144b954bdff90662534cbbe1f-accordion-summary-1\"\n                class=\"wp-component-accordion-item__title js-wp-component-accordion-item-title\"\n                type=\"button\"\n                aria-expanded=\"false\"\n                aria-controls=\"block_f10abea144b954bdff90662534cbbe1f-accordion-1\">\n                <span class=\"wp-component-accordion-item__inner-title\">\n                                                            <span>Step 2 \u2014 Prepare prerequisites<\/span>\n                <\/span>\n                <div class=\"wp-component-accordion-item__toggle\">\n                    <svg class='edwp-icon edwp-icon--lrg js-icon wp-component-accordion-item__toggle__icon' aria-hidden='true'>\n                <use xlink:href='#chevron'><\/use>\n            <\/svg>                <\/div>\n            <\/button>\n            <div\n                id=\"block_f10abea144b954bdff90662534cbbe1f-accordion-1\"\n                class=\"wp-component-accordion-item__content js-wp-component-accordion-item-content\"\n                aria-labelledby=\"block_f10abea144b954bdff90662534cbbe1f-accordion-summary-1\"\n                role=\"region\">\n                <div class=\"wp-component-accordion-item__content__inner\">\n                    <div class=\"wp-component-accordion-item__content__box\">\n                        <div class=\"wp-component-paragraph wp-component-accordion-item__content-text\">\n    <p class=\"prose\">Before starting the onboarding, make sure you have the following ready. The deployment runs a PowerShell script in Azure Cloud Shell and requires temporary elevated access in Azure.<\/p>\n<ul class=\"bullet-list\">\n<li><strong>Global Administrator<\/strong>\u00a0access on the Azure account \u2014 required to run the onboarding script<\/li>\n<li><strong>Tenant ID<\/strong>\u00a0and\u00a0<strong>Subscription ID<\/strong>\u00a0from the Azure portal \u2014 you&#8217;ll need these during onboarding in Elements Security Center<\/li>\n<li><strong>Deployment location<\/strong>\u00a0\u2014 the Azure region where the new resources will be created<\/li>\n<li><strong>Azure Management Group<\/strong>\u00a0\u2014 the subscription must be assigned to a Management Group before deployment<\/li>\n<li><strong>Email address for notifications<\/strong>\u00a0\u2014 Microsoft will send alerts to this address if the Event Hub reaches capacity<\/li>\n<\/ul>\n<div class=\"info-box\"><strong>What gets deployed:<\/strong>\u00a0The onboarding script creates a resource group (WSecCD) in your Azure tenant containing an Event Hub, diagnostic settings that forward Entra ID logs to WithSecure, and an alert for Event Hub capacity. This is a one-time setup \u2014 after deployment, logs flow to WithSecure continuously. Associated Azure costs are typically \u20ac25\u201330\/month for mid-sized organisations.<\/div>\n<\/div>\n                                                                                            <\/div>\n                <\/div>\n            <\/div>\n        <\/div>\n            <div class=\"wp-component-accordion-item__item js-wp-component-accordion-item-item\">\n                        <button\n                id=\"block_f10abea144b954bdff90662534cbbe1f-accordion-summary-2\"\n                class=\"wp-component-accordion-item__title js-wp-component-accordion-item-title\"\n                type=\"button\"\n                aria-expanded=\"false\"\n                aria-controls=\"block_f10abea144b954bdff90662534cbbe1f-accordion-2\">\n                <span class=\"wp-component-accordion-item__inner-title\">\n                                                            <span>Step 3 \u2014 Deploy and connect<\/span>\n                <\/span>\n                <div class=\"wp-component-accordion-item__toggle\">\n                    <svg class='edwp-icon edwp-icon--lrg js-icon wp-component-accordion-item__toggle__icon' aria-hidden='true'>\n                <use xlink:href='#chevron'><\/use>\n            <\/svg>                <\/div>\n            <\/button>\n            <div\n                id=\"block_f10abea144b954bdff90662534cbbe1f-accordion-2\"\n                class=\"wp-component-accordion-item__content js-wp-component-accordion-item-content\"\n                aria-labelledby=\"block_f10abea144b954bdff90662534cbbe1f-accordion-summary-2\"\n                role=\"region\">\n                <div class=\"wp-component-accordion-item__content__inner\">\n                    <div class=\"wp-component-accordion-item__content__box\">\n                        <div class=\"wp-component-paragraph wp-component-accordion-item__content-text\">\n    <h6 class=\"sub-heading\">In Elements Security Center<\/h6>\n<ol class=\"numbered-list\">\n<li>Log in using your EDR credentials and go to\u00a0<strong>Environment &gt; Cloud &gt; Microsoft Tenants<\/strong>.<\/li>\n<li>Select\u00a0<strong>Add Azure tenant<\/strong>, enter the display name and tenant ID, and follow the wizard to set up Identity Inventory. Accept the permissions for the\u00a0<strong>WithSecure-CSPM-Scanner-MTA<\/strong>\u00a0enterprise application when prompted.<\/li>\n<li>Under\u00a0<strong>Security capabilities<\/strong>, select\u00a0<strong>Identity Security &gt; Add<\/strong>. Enter the subscription ID, deployment location, and notification email address, then download the\u00a0<strong>WithSecure Elements XDR Identity Security for Entra ID.zip<\/strong>\u00a0file.<\/li>\n<\/ol>\n<h6 class=\"sub-heading\">In the Azure portal<\/h6>\n<ol class=\"numbered-list\">\n<li>Temporarily elevate your Azure access: go to\u00a0<strong>Azure Active Directory &gt; Properties<\/strong>\u00a0and switch\u00a0<strong>Access management for Azure resources<\/strong>\u00a0to\u00a0<strong>Yes<\/strong>. Sign out and back in.<\/li>\n<li>Open\u00a0<strong>Azure Cloud Shell<\/strong>\u00a0(PowerShell mode), upload the zip file using the upload button, then run:\n<div>unzip &#8216;.\/WithSecure Elements XDR Identity Security for Entra ID.zip&#8217;<br \/>\ncd withsecure<br \/>\nNew-AzRoleAssignment -SignInName &#8220;[your-UPN]&#8221; -Scope &#8220;\/&#8221; -RoleDefinitionName &#8220;Owner&#8221;<br \/>\n.\/deploy.ps1<\/div>\n<\/li>\n<li>After deployment, validate the WSecCD resource group in Azure contains the Event Hub and that diagnostic settings are configured.<\/li>\n<\/ol>\n<h6 class=\"sub-heading\">Back in Elements Security Center<\/h6>\n<ol class=\"numbered-list\">\n<li>Go to\u00a0<strong>Environment &gt; Cloud &gt; Microsoft Tenants<\/strong>, select your tenant, and select\u00a0<strong>Add connection string<\/strong>. Paste the connection string from Azure Cloud Shell and select\u00a0<strong>Add<\/strong>. Status should change to\u00a0<em>The tenant is protected<\/em>\u00a0within 5 minutes.<\/li>\n<li>Verify detections are working by running the test script in Cloud Shell:\u00a0<code>.\/WithSecureIdentitySecurityTestingTool.ps1<\/code>. Then go to\u00a0<strong>Events &gt; Broad Context Detections<\/strong>\u00a0and confirm a test detection called\u00a0<em>WithSecure test detection add application<\/em>\u00a0has appeared.<\/li>\n<li>Finally, revoke the elevated Azure access you granted in step 4:\u00a0<code>Remove-AzRoleAssignment -SignInName \"[your-UPN]\" -Scope \"\/\" -RoleDefinitionName \"Owner\"<\/code>, then switch\u00a0<strong>Access management for Azure resources<\/strong>\u00a0back to\u00a0<strong>No<\/strong>\u00a0in the Azure portal.<\/li>\n<\/ol>\n<div class=\"info-box\"><strong>Note:<\/strong>\u00a0No additional roles are required to view Identity Security Broad Context Detections. If deployment fails, raise a ticket with WithSecure Customer Care.<\/div>\n<\/div>\n                                                                                            <\/div>\n                <\/div>\n            <\/div>\n        <\/div>\n    <\/div>\n                            <\/div>\n                    <\/div>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-cards edwp-block wp-block-cards--col-3 layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-cards__container\">\n                                                    <div class=\"wp-block-cards__cards row-load\">\n                    <article class=\"wp-component-card wp-block-cards__card wp-component-card--style-default\">\n    <div class=\"wp-component-card__content\">\n        <div>\n                                    <h2                            class=\"wp-component-card__title\"\n            >\n                User guide \u2014 Elements Identity Security        <\/h2>\n                    <\/div>\n                    <p class=\"wp-component-card__description\">\n                Full documentation covering Azure prerequisites, deployment via PowerShell, infrastructure overview, ongoing management, and offboarding            <\/p>\n                            <div class=\"wp-component-card__button-wrapper\">\n                                    <a class=\"wp-component-button btn btn--primary wp-component-card__button\" href=\"https:\/\/support.withsecure.com\/userguides\/product.html#business\/identity\/latest\/en\">View Full Guide<\/a>                                            <\/div>\n            <\/div>\n<\/article>\n<article class=\"wp-component-card wp-block-cards__card wp-component-card--style-default\">\n    <div class=\"wp-component-card__content\">\n        <div>\n                                    <h2                            class=\"wp-component-card__title\"\n            >\n                WithSecure Community        <\/h2>\n                    <\/div>\n                    <p class=\"wp-component-card__description\">\n                Stay up to date with product announcements and changelogs, get answers to your questions, and share product ideas            <\/p>\n                            <div class=\"wp-component-card__button-wrapper\">\n                                    <a class=\"wp-component-button btn btn--primary wp-component-card__button\" href=\"https:\/\/community.withsecure.com\/\">Go to Community<\/a>                                            <\/div>\n            <\/div>\n<\/article>\n<article class=\"wp-component-card wp-block-cards__card wp-component-card--style-default\">\n    <div class=\"wp-component-card__content\">\n        <div>\n                                    <h2                            class=\"wp-component-card__title\"\n            >\n                Knowledge base        <\/h2>\n                    <\/div>\n                    <p class=\"wp-component-card__description\">\n                Troubleshooting and how-to articles covering Azure deployment, Event Hub configuration, Entra ID log forwarding, and detections            <\/p>\n                            <div class=\"wp-component-card__button-wrapper\">\n                                    <a class=\"wp-component-button btn btn--primary wp-component-card__button\" href=\"https:\/\/community.withsecure.com\/en\/kb\/categories\/157-identity-security\">Identity Security Knowledge Base<\/a>                                            <\/div>\n            <\/div>\n<\/article>\n                <\/div>\n                                                <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":12,"featured_media":0,"parent":2257,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-2282","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Elements Identity Security - WithSecure\u2122<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/support.withsecure.com\/en\/quick-start\/elements-identity-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Elements Identity Security - WithSecure\u2122\" \/>\n<meta property=\"og:url\" content=\"https:\/\/support.withsecure.com\/en\/quick-start\/elements-identity-security\/\" \/>\n<meta property=\"og:site_name\" content=\"WithSecure\u2122\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-22T14:12:39+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/support.withsecure.com\\\/en\\\/quick-start\\\/elements-identity-security\\\/\",\"url\":\"https:\\\/\\\/support.withsecure.com\\\/en\\\/quick-start\\\/elements-identity-security\\\/\",\"name\":\"Elements Identity Security - WithSecure\u2122\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/support.withsecure.com\\\/en\\\/#website\"},\"datePublished\":\"2026-05-06T11:07:43+00:00\",\"dateModified\":\"2026-05-22T14:12:39+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/support.withsecure.com\\\/en\\\/quick-start\\\/elements-identity-security\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/support.withsecure.com\\\/en\\\/quick-start\\\/elements-identity-security\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/support.withsecure.com\\\/en\\\/quick-start\\\/elements-identity-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/support.withsecure.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Quick start\",\"item\":\"https:\\\/\\\/support.withsecure.com\\\/en\\\/quick-start\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Elements Identity Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/support.withsecure.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/support.withsecure.com\\\/en\\\/\",\"name\":\"WithSecure\u2122\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/support.withsecure.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Elements Identity Security - WithSecure\u2122","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/support.withsecure.com\/en\/quick-start\/elements-identity-security\/","og_locale":"en_US","og_type":"article","og_title":"Elements Identity Security - WithSecure\u2122","og_url":"https:\/\/support.withsecure.com\/en\/quick-start\/elements-identity-security\/","og_site_name":"WithSecure\u2122","article_modified_time":"2026-05-22T14:12:39+00:00","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/support.withsecure.com\/en\/quick-start\/elements-identity-security\/","url":"https:\/\/support.withsecure.com\/en\/quick-start\/elements-identity-security\/","name":"Elements Identity Security - WithSecure\u2122","isPartOf":{"@id":"https:\/\/support.withsecure.com\/en\/#website"},"datePublished":"2026-05-06T11:07:43+00:00","dateModified":"2026-05-22T14:12:39+00:00","breadcrumb":{"@id":"https:\/\/support.withsecure.com\/en\/quick-start\/elements-identity-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/support.withsecure.com\/en\/quick-start\/elements-identity-security\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/support.withsecure.com\/en\/quick-start\/elements-identity-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/support.withsecure.com\/en\/"},{"@type":"ListItem","position":2,"name":"Quick start","item":"https:\/\/support.withsecure.com\/en\/quick-start\/"},{"@type":"ListItem","position":3,"name":"Elements Identity Security"}]},{"@type":"WebSite","@id":"https:\/\/support.withsecure.com\/en\/#website","url":"https:\/\/support.withsecure.com\/en\/","name":"WithSecure\u2122","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/support.withsecure.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/2282","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/comments?post=2282"}],"version-history":[{"count":13,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/2282\/revisions"}],"predecessor-version":[{"id":2840,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/2282\/revisions\/2840"}],"up":[{"embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/2257"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=2282"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}