Skip to main content

Cloud ConnectorsExabeam Cloud Connectors Configuration Guide

Zoom Cloud Connector

Use Exabeam Cloud Connector for Zoom to ingest data about Zoom activity into Data Lake . Zoom is an enterprise video conferencing platform. When you connect Exabeam to Zoom, you can ingest operations logs reports to audit administrators and users, and sign-in/sign-out activity logs to monitor when a user signs in or out. For the cloud connector to retrieve Zoom data, Zoom must use Webhooks to push the data to an HTTPS endpoint in a public cloud environment like Amazon Web Services (AWS). The cloud connector pulls this data from the cloud environment using the Zoom REST API.

Zoom Audit Source and Event Support

Zoom offers a cloud-based communication platform for video and audio conferencing with real-time messaging and content sharing for enterprise users. Zoom enables users to virtually interact with each other securely. For more information see the Zoom documentation.

The following table displays the audit source API and security events supported by the connector.

Audit Source: API

Service or Module Covered

Operations logs report

Users’ and administrators’ activity

Sign-in/Sign-out activities report

Sign-ins and Sign-outs of users

Prerequisites to Configure the Zoom Cloud Connector

Zoom authenticates every HTTP request made to the Zoom API. Zoom supports two authentication methods: OAuth2.0 and JSON Web Token (JWT) for request authentication. You must determine the authentication method that you want to use.

Before you configure the Zoom connector you must complete the following prerequisites:

  • Obtain the values for client ID and client secret if you use the OAuth2.0 method.

  • Obtain the values for API key and API secret if you use the JWT method.

  • Ensure the https://api.zoom.us/v2/report service is open for communication with the Exabeam Cloud Connector platform.

Obtain Client ID and Client Secret for OAuth2.0

The OAuth2.0 protocol allows applications to obtain required access to user accounts via the HTTP service. For more information, see the Zoom documentation.

Note

To create the OAuth app, the user must be of the type Licensed, and the account role type must be of the type Owner.

To create the Zoom OAuth app:

  1. Log in to Zoom App Marketplace with your registered credentials.

  2. On the upper right corner, click Develop and select Build Legacy App.

    Zoom_Connector_legacy.png

  3. On the Choose your app type page, for the OAuth app type click Create.

  4. Specify a name for the app in the App Name box.

  5. Select Account-level app as the app type.

  6. Confirm that the option to publish the app on Zoom app marketplace is disabled.

  7. Click Create.

  8. The My App page displays the values for client ID and client secret for the app. Note these values, because you will use them to authenticate the API client while configuring the Zoom connector on the Exabeam Cloud Connector platform.

  9. In the Redirect URL for OAuth and Whitelist URL field, enter the URL https://auth.skyformation.net/v1/oauth to have Zoom authenticate Exabeam cloud connector.

  10. Click Continue.

  11. In the left pane, navigate to Scopes > Add Scopes.

  12. In the Add Scopes pop-up, set required permissions for the Zoom app to have Exabeam pull events.

    Using the search box in the left pane, search for and select the following scopes:

    • report:read:user_activities:admin

    • report:read:operation_logs:admin

    For example, refer to the following screenshot.

    Zoom_Connector_Legacy_2.png

  13. Click Done.

Obtain API Key and API Secret for JWT

The JSON Web Tokens (JWT) are strings of text used for verifying the authorization of the server. For more information, see https://jwt.io/. To build a server-server authenticated app that allows other users and apps to avail its services, you must create a JWT app. For more information, see the Zoom documentation.

Note

You can create only one JWT app for an organization. If your organization already has a JWT app, use the existing JWT app when configuring the Zoom cloud connector.

To create the Zoom JWT app:

  1. Log in to Zoom App Marketplace with your registered credentials.

  2. On the upper right corner, click Develop and select Build App.

  3. On the Choose your app type page, for the JWT app type click Create.

  4. Specify a name for the app in the App Name box.

  5. In the Basic Information section, specify the required details such as company name, and developer contact information.

  6. In the left pane, click App Credentials. The App Credentials section displays the values for API Key and API Secret for the app. Note these values because you will use them to authenticate the API client while configuring the Zoom connector on the Exabeam Cloud Connector platform.

Configure the Zoom Cloud Connector

To configure the Zoom connector to import data into the Exabeam Cloud Connector platform:

  1. Complete the Prerequisites to Configure the Zoom Cloud Connector.Prerequisites to Configure the Zoom Cloud Connector

  2. Log in to the Exabeam Cloud Connectors platform with your registered credentials.

  3. Navigate to Settings > Accounts > Add Account.

  4. Click Select Service to Add, then select Zoom from the list.

  5. In the Accounts section, enter the required information. Required fields are indicated with a red bar.

    1. Tenant – Select a tenant to attach to the connector if you are using a multi-tenant edition of Exabeam. Otherwise, select default.

    2. Account Name – Specify a name for the Zoom connector. For example, Zoom collaboration.

    3. Description – (Optional) Describe the Zoom connector. For example, Zoom Web conferencing and collaboration.

    4. Authentication Method – Select the authentication method that you want to use.

      If you select JWT, enter the values for the API key and API secret.

      • API Key – Enter the value for the API key that you obtained while completing the prerequisites.

      • API Secret – Enter the value for the API secret that you obtained while completing the prerequisites.

      If you select OAuth2, enter the values for the client ID and client secret.

      • Client ID – Enter the value for the client ID that you obtained while completing the prerequisites.Prerequisites to Configure the Zoom Cloud Connector

      • Client Secret – Enter the value for the client secret that you obtained while completing the prerequisites.Prerequisites to Configure the Zoom Cloud Connector

      • External Authentication – Click the Open External OAuth Window to log in to the Zoom account that you used for creating the Zoom OAuth app and click Authenticate.

        Note

        The External Authentication field is a required field although it is not indicated with a red bar.

  6. To confirm that the Exabeam Cloud Connector platform communicates with the service, click Test Connection.

  7. Click Done to save your changes. The cloud connector is now set up on the Exabeam Cloud Connector platform.

  8. To ensure that the connector is ready to send and collect data, Start the connector and check that the status shows OK.