Nudge Security

Nudge Security is a SaaS management platform that provides discovery, governance, and security controls for SaaS applications, accounts, and users across an organization.

Use Cases the Adapter Solves

• Discover Shadow IT: Identify all SaaS applications in use across your organization, including unapproved apps and OAuth grants that may pose security risks.
• Monitor SaaS Account Security: Track user accounts across SaaS platforms to ensure proper authentication, MFA status, and identify high-risk access patterns.
• Enforce SaaS Governance: Maintain visibility into SaaS application approvals, compliance status, and user access to support governance policies and audit requirements.

Asset Types Fetched

• Application Add-ons, SaaS Applications, Application Add-on Instances, Admin-Managed Extensions, Admin-Managed Extension Instances, Users, User-Initiated Extension Instances, User-Initiated Extensions, Extensions, Application Keys, User Extensions

Endpoint to Asset Type Mapping:

Data Retrieved through the Adapter

SaaS Applications

• Name, Domain, Category

User Extensions

• Name, Related Vendor Name, Created

Users

• Display Name, First Name, Last Name
• Mail, User Status, Is Admin

Before You Begin

Required Ports

• TCP port 443 (HTTPS)

Authentication Methods

The adapter authenticates using an API token (Bearer token) generated from the Nudge Security admin portal. The token is passed in the Authorization header of API requests.

APIs

Axonius uses the Nudge Security API v1.0. The following endpoints are called:

• POST /api/1.0/apps/search - Retrieves SaaS applications discovered in the organization
• POST /api/1.0/accounts/search - Retrieves user accounts associated with SaaS applications
• POST /api/1.0/users/search - Retrieves user information from the organization

Required Permissions

The following permissions are required:

Administrator Role (Required)

The API user must have the Administrator role in Nudge Security to generate API tokens. The Administrator role provides:

• Full access to all data in Nudge Security (apps, accounts, users, OAuth grants, security events)
• Ability to generate and manage API tokens from Settings > API Tokens

Supported From Version

Supported from Axonius version 9.0

Setting Up Nudge Security to Work with Axonius

Follow these steps to generate an API token in Nudge Security:

1. Log in to the Nudge Security admin portal at https://www.nudgesecurity.io/login.
2. Navigate to Settings > API Tokens.
3. Click Create API Token.
4. Provide a descriptive name for the token (e.g., "Axonius Integration").
5. Click Create.
6. Important: Copy the API token immediately - it is displayed only once. If you lose the token, you will need to generate a new one.
7. Save the token securely for use in Axonius.

Connecting the Adapter in Axonius

Navigate to the Adapters page, search for Nudge Security, and click on the adapter tile.

Click Add Connection.

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

1. Host Name or IP Address - Base URL for the Nudge Security API. Do not include a trailing slash. Example: https://api.nudgesecurity.io
2. API Key - API token obtained from Settings > API Tokens in the Nudge Security admin portal. The token is displayed only once and must be saved immediately. Tokens expire after 4 weeks of inactivity.

Optional Parameters

1. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
2. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.
3. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
4. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.