Zoom

About this document

This document provides the step-by-step procedure to configure Zoom in SAFE.

Introduction

SAFE allows you to onboard and assess your Zoom account for its configuration assessment. SAFE admins can configure the Zoom integration in SAFE from the Zoom card available on the SAFE Hooks page. 

Prerequisites

• The Zoom account must be a Business or Enterprise account.
• Zoom application with account:read:admin permission. This scope allows API to read account settings.
• For configuring Zoom in SAFE, you will need the following credentials:
  • Account ID of your Zoom account
  • Zoom Administrator User Credentials
  • Client ID 
  • Client Secret

Generate Client ID and Client Secret

To generate the connection details:

1. Login to your Zoom account as Admin. 
2. Navigate to Admin > Advance > App Marketplace from the left navigation.
   
3. From the Develop drop-down, click the BuildApp option, available at the top-right of the screen.
   
4. Click the Server-to-Server OAuth App type.
   
5. Enter the name of your app,  e.g., SAFE Integration, SAFE App, etc.
6. Click the Create button. The system creates the App.
   
7. Go to the App details page and click theApp credentials option.
8. Here system displays the Account ID, Client ID, and Client Secret.
9. Copy and save these credentials to use while configuring Zoom in SAFE.
   
   Important

   Add information such as a short description and developer contact information (name and email address) for the app. This information is required for the app activation.
10. Click on Scopes.
11.  Click Add Scopes.
12.  Search and add the scope account:read:admin.
    
13. Click the Continue button. Your app will get activated.
    

Configure Zoom

To configure Zoom in SAFE:

1. Go to the SAFE Hooks.
2. Click the Zoom card.
3. Enter the Account ID, Client ID, and ClientSecret.
4. Enter the Autosync frequency.
5. Click the Test Connection button. 
6. Once the connection is verified, click the Save button.
7. Once the configuration is saved, click the Sync Now button to trigger the on-demand sync outside of the Scheduled Auto Sync.
   

View Result

After a successful sync, the Zoom assets will be automatically imported into the SAFE.

To view the assets pulled from Zoom:

1. Navigate to Technology > Assets.
2. Filter the asset list with Asset Type in Zoom. the system displays the Zoom assets.

To view the results for an asset:

1. Navigate to the Risk Scenario page, and click the Group Risk tab.
2. Click the Cloud - SaaS Applications Risk.
3.  Scroll down and click the Attack Surface view.
4. Here you can find the Zoom asset.
   
   
5. Click the Zoom asset to view the controls and their status.