What to Configure Next

Now that you finished the xorlab integration, have a look at the following topics:

Step	Description
Enable User Login	In case you haven’t done it yet, simplify user login to xorlab via SAML, LDAP or Auto-Login
Customize detection	Review the built-in detection and activate additional features
Enable SSQ	Enable Self-Service Quarantine (SSQ) for your end-users
Connect a SIEM	Forward verdicts, threat intelligence, and the audit trail to your SIEM or log management platform
Automate with a SOAR	Trigger playbooks from xorlab events, and let them manage list entries over the API

For everything else xorlab connects to — identity providers, Microsoft Graph, threat intelligence, and awareness training tools — see What xorlab Connects To.