Setting up Lifecycle Insights for Liongard Data Integration

 

The Liongard integration for Lifecycle Insights is intended to supplement data as currently provided by your PSA or IT Documentation tool.  At this time, we will support the following data sets from Liongard:


  • Google Workspace / G-Suite
    • Users (including products licensed, last activity date and 2-Step Verification Status) 
    • ChromeOS Devices
    • Mobile Devices
  • Microsoft 365
    • Users (including products licensed and last activity date)
    • License Summary by Company (Microsoft 365 Summary Report)
  • Azure Active Directory
    • Users (includes MFA Status)
    • Devices
  • KnowBe4
    • Users (including Risk Score as well as Phish Prone Percentage)


Please check back frequently as we intend on adding to this list!


Liongard Configuration

 

Estimated Time: < 10 minutes

You will first need to configure an integration for LCI within Liongard.   The following outlines the steps to set up the integration.  When complete, you will have a number of attributes associated with the configuration that will then be needed to input into LCI (next step).   In order to proceed, you must have Administrative access to Liongard.

1. Log into Liongard with Administrative Access

2. Under your name, click on Account Settings

3. In the left Nav Pane, click on Access Tokens, then click Generate New Token


4. You will be prompted with your secret key and token.  Copy these and save them off.  You will need them later!



Next, we will set up the Metrics that LCI will use to pull the data.  You only need to set up the metrics that you will use - but it is very important that you use the exact values as specified in this document. 


5. In the left nav pane, click on My Liongard Instance

  1. Copy the URL - you will need to enter this later.  Note, we will need to prepend https:// to the API URL later.



6.  Click on Admin, then Metrics



Repeat the following steps for each Metric you want to set up:


Metric: G-Suite Users

6a. Click Add Metric

6b.  Inspector -> Google Workspace

6c.  Name -> LCI Google Workspace - Users 

6d.  Data Print Query -> Users[*].{first_name: name.givenName, last_name: name.familyName, email: primaryEmail,products: assignedLicenses_m[*].skuName, mfa_registration_status: isEnforcedIn2Sv_m, last_activity_date:null} 

5e. Click Save


Metric: G-Suite ChomeOsDevices

6a. Click Add Metric

6b.  Inspector -> Google Workspace 

6c.  Name -> LCI Google Workspace - ChromeOS Devices  

6d.  Data Print Query -> ChromeOSDevices[*].{asset_key:deviceId,status:status,name:null,vendor:null,serial:serialNumber,model:model,tag_number:null,purchase_date:manufactureDate,warranty_expiration_date:null,os:osVersion,cpu:null,ram:systemRamTotal,last_sync:lastSync,last_login_user:annotatedUser,contact:null,device_eol: autoUpdateExpiration_m}  

6e. Click Save


Metric: G-Suite Mobile Devices

6a. Click Add Metric

6b.  Inspector -> Google Workspace 

6c.  Name -> LCI Google Workspace - Mobile Devices 

6d.  Data Print Query -> MobileDevices[*].{asset_key:deviceId,status:status,name:null,vendor:manufacturer,serial:serialNumber,model:model,tag_number:null,purchase_date:null,warranty_expiration_date:null,os:os,cpu:null,ram:null,last_sync:lastSync,last_login_user:name[0],contact:null}  

6e. Click Save


Metric: Microsoft 365 Users

6a. Click Add Metric

6b.  Inspector -> Microsoft 365 

6c.  Name -> LCI M365 - Users 

6d.  Data Print Query -> Users[?accountEnabled].{first_name: givenName, last_name: surname, email: userPrincipalName,products: Assigned_Products, mfa_registration_status: null, last_activity_date: Last_Activity_Date}  

5e. Click Save


Metric: Microsoft 365 License Summary

6a. Click Add Metric

6b.  Inspector -> Microsoft 365 

6c.  Name -> LCI MS365 - License Summary 

6d.  Data Print Query -> Licensing[*].{sku_id: skuId, sku_part_number: skuPartNumber,applies_to: appliesTo,capability_status:capabilityStatus,consumed_units:consumedUnits,number_enabled:prepaidUnits.enabled,number_suspended:prepaidUnits.suspended,number_warning:prepaidUnits.warning}

6e. Click Save


Metric: Azure Active Directory Users

6a. Click Add Metric

6b.  Inspector -> Azure Active Directory

6c.  Name -> LCI Azure AD - Users  

6d.  Data Print Query -> Users[*].{first_name: givenName, last_name: surname, email: mail,products: null, mfa_registration_status: isMfaRegistered_r,last_activity_date:null } 

6e. Click Save


Metric: Azure Active Directory Devices

6a. Click Add Metric

6b.  Inspector -> Azure Active Directory

6c.  Name -> LCI Azure AD - Devices  

6d.  Data Print Query -> Devices[*].{asset_key:deviceId,status:'Active',name:displayName,vendor:manufacturer,serial:serialNumber,model:model,tag_number:null,purchase_date:null,warranty_expiration_date:null,os:operatingSystem ,cpu:null,ram:null,last_sync:lastSyncDateTime,last_login_user:emailAddress,contact:null} 

6e. Click Save


Metric: KnowBe4 Users including Risk Score and Phish Prone Pct

6a. Click Add Metric

6b.  Inspector -> KnowBe4 

6c.  Name -> LCI KnowBe4 - Users  

6d.  Data Print Query -> Users[*].{first_name: first_name, last_name: last_name, email: email,products: null, mfa_registration_status: null,last_activity_date:null,risk_score:current_risk_score,phish_prone_pct:phish_prone_percentage} 

6e. Click Save


You are ready to configure LCI!


Lifecycle Insights Configuration

 

Estimated time: < 10 minutes

1. Log into Lifecycle Insights.  The login URL is: https://master.lifecycleinsights.io/signIn .

2. Once logged in, notice the Left Navigation pane has an Integrations Option under Administration. Click on Integrations, and your main content pane will show the list of available integration sources.  Choose Liongard.



3. Next, please fill in the form

  1. Check Check Integration Active 
  2. Enter the API URL from Liongard Configuration step #4.  You will need to ensure that the URL is prefixed with https://.  So if you copied the value of safari.app.liongard.com - please enter https://safari.app.liongard.com
  3. Enter the Access Key exactly as you recorded it earlier
  4. Enter the Secret Key exactly as you recorded it earlier



4.  Click Test Settings.  If you get an error... please make sure all values are correct.  If you are stuck, please email us at support@lifecycleinsights.io


5.  Click Save Settings.  At this point, if your settings are correct you should get a message indicating that you need to map your companies.



6.  Click on the Company Match tab




7.  Map the Liongard Environment Name to its corresponding Company.  Rinse and repeat for all of your clients hat you want to bring data from Liongard into LCI for.


8.  Click back on the API CREDENTIALS AND SETUP tab

9. At this point, you will see a list of datasets that are available to you.

10.  Select the datasets from Liongard you want to bring into LCI.  Important, if you select any dataset that includes devices, you must select a Default Asset Type prior to enabling the dataset.

11.  At this point, syncs will occur automatically each night.  If you want to perform an on demand sync, you can click the Sync Now! button in the Settings tab.

12.  Finally, you can click the Log tab to check the status of your syncs.