Integrations

From Integrations, it's possible to integrate Portal with services that organizations have on external platforms to simplify the management of tasks on the devices, view unified information, or perform various actions.

Integration with Entra ID

The integration of Portal with Entra ID allows treating an organization's devices as just another group of devices; in this way, besides the dynamic and static workspace groups an organization might have, Entra ID workspace groups would be generated.

Integration does not imply that these groups will exist in Portal, but when any action on them is desired in the Workspaces module, Portal will display the list of devices that comprise it to make a decision.

Enable integration with Entra ID

1. To create an API connection between Portal and Entra ID, the organization must create an application registration in Azure.
2. Log on to Portal.
3. Go to Settings -> Integrations-> Entra ID.
4. Click on Edit and enter the following information:

• Id. of application (client). Client ID. This can be obtained from the Azure registration panel.
• Secret string. Client secret (key) used for authentication. This can be obtained from the Azure registration panel.
• Id. directory (tenant). This is the Azure tenant ID. You can obtain it here.

5. Click on Save.
6. Click on Check to verify that the integration has been registered correctly.

tip

For more information about this feature, please check the Set up integration with Entra ID guide.

Integration with Intel vPro® Enterprise

Intel vPro® is a set of hardware and firmware technologies designed to enhance the security, manageability, and productivity of business computers.

The integration with Intel vPro Enterprise has been designed to be completely automated and transparent for the user, without the need for manual actions or additional infrastructure deployment. It helps reduce incident resolution times and enables support scenarios that previously required physical intervention on devices.

The integration of Flexxible with Intel vPro® Enterprise allows you to perform useful additional manageability operations on the physical Windows workspaces that provide support to Intel AMT® technology, including:

• Schedule power on and off actions using defined schedules.
• Turn on the device over the internet, including advanced options like direct boot to BIOS or loading an ISO image during startup, for example, for system reinstallation tasks.
• Access to out-of-band KVM sessions to view and interact with the device screen even when the operating system hasn't loaded.

Features

• Does not require the implementation of a dedicated Intel® EMA server since this functionality is integrated into the backend of the platform, segmented and instantiated individually for each client.
• Simple activation from the console using an Enable or Disable switch.
• Upon activation, a compatibility diagnostic process is automatically initiated on the organization's devices.
• Compatible devices are ready to confirm activation with a single click.

From the Intel vPro section in Portal, you can check detailed information about the hardware and status of devices, as well as perform additional operations, including out-of-band actions.

Requirements

To benefit from the Intel vPro® Enterprise integration, devices must meet the following requirements:

Supported operating systems

Devices must have Windows 10 and Windows 11, 64-bit, installed.

Compatibility with Intel® AMT

Enabling the integration will perform automated operations in all the physical workspaces in your organization to check for Intel® AMT support. This process includes the unattended install and uninstall of the Intel® EMA Configuration Tool on all devices in your environment.

After this process is completed, you will see the results for each workspace in the lntel vPro Enterprise column in the Workspaces section (Portal), and also in the details of each workspace.

The possible values for this field are:

• Not supported. The device does not support Intel® AMT, so it will not benefit from integration with Intel vPro® Enterprise.
• Requires attention. The device supports Intel® AMT technology, but Intel® EMA Agent has not been installed. Please check the Intel EMA Agent section below to see how to proceed.
• Ready. The device supports Intel® AMT technology, and Intel EMA Agent has been installed and configured correctly.

Intel EMA Agent

Intel EMA Agent is an Intel software which is required in the workspace to allow the remote management operations included in the integration.

For the integration to work correctly, the installation and configuration of the Intel EMA Agent on the workspaces will be performed by Flexxible Odin. Do not attempt to install or configure the agent manually or by other means.

Additional requirements may apply for this agent to run properly. Consult Intel® Endpoint Management Assistant (Intel® EMA) for more information.

To install the Intel EMA Agent, you can refer to the section Install Intel EMA Agent.

Communications

In addition to the FlexxAgent's communication requirements, devices must have a Client Initiated Remote Access (CIRA), a key component of Intel Endpoint Management Assistant. To make sure this connection is available, the following must be verified:

1. That the hostname of the Flexxible Intel EMA server, iagent.flexxible.com, can be resolved to an IP address from all devices planned to be included in the integration.
2. Make sure the server is accessible from the device through port 443.
3. That traffic between the device and the server is allowed by the proxy server, if applicable.

Enable integration with Intel vPro® Enterprise

This action can only be performed by users with the Organization Administrator permission in Portal.

1. Log on to Portal.
2. Go to Settings -> Integrations -> Intel vPro Enterprise.
3. Click on Enable.
4. A window with information about the integration and a confirmation request will appear. Click on Confirm.

The integration process may take a few minutes to provision and configure the tenant. When completed, the status will show as Enabled along with related information.

Gradually, FlexxAgent will start performing internal checks on the workspaces to determine which ones support Intel® AMT technology. You should wait a few minutes before the information appears in Portal. The wait time depends on the tenant's FlexxAgent configuration and reporting groups.

Go to the Workspaces section and check the information in the Intel vPro Enterprise column. You can also filter the devices by the field value to easily find which ones support Intel® AMT technology.

Install Intel EMA Agent on devices that indicate support for Intel® AMT (in the Intel vPro Enterprise column of Workspaces, they are labeled as Requires attention).

Install Intel EMA Agent

1. Go to Workspaces, in the Workspaces module, and select the desired workspace.
2. Run the Install Intel EMA Agent operation from the Operations menu. Follow the on-screen instructions to verify the process completed successfully.

3. Once completed, the device's Intel vPro Enterprise field will show Ready.

To learn more about Intel vPro®, please visit the following links:

• Intel vPro® Enterprise
• Intel EMA configuration tool
• Intel EMA Agent documentation (refer to the “Intel EMA Admin and Usage Guide” document)

Security integrations

Integration with antivirus and EDR solutions provides first-level support with direct visibility into the security status of devices, without needing to access security consoles, which are usually reserved for more specialized profiles.

These integrations display the following information in real-time:

• Installed antivirus, including its version, operational status, and the CPU and memory consumption of its agent on the device.
• Installed EDR, including its version, operational status, and the CPU and memory consumption of its agent on the device.
• Active security detections, which allow the support agent to correctly assess the priority of an incident when a user reports anomalous behavior on the device.

Access to this information facilitates the differentiation between a performance issue and an incident that also involves an active security threat, speeding up decision-making and incident response.

note

All security alerts and statuses are displayed in the Security section of the detailed view of each device.

In the device detail view, you can find support tools, remote assistance, management, and monitoring. This allows immediate prioritization and agile escalation when endpoint security is compromised.

CrowdStrike

CrowdStrike is a cloud-based cybersecurity platform that protects devices, identities, and data against advanced threats. Integration with Flexxible allows FlexxAgent to communicate with your cloud instance to understand the status of devices against a threat detected by the CrowdStrike agent.

Enable integration with CrowdStrike

1. Log on to Portal.
2. Go to Settings -> Integrations-> CrowdStrike.
3. Click on Edit and enter the following information:

• API Client ID. Unique identifier that represents the client on the CrowdStrike platform.
• Secret String. Secret key associated with the client ID.
• Region. Geographic location of the customer's cloud environment. The field offers options like eu, eu-1, us-gov-1, us-1, and us-2.

4. Click on Save.

tip

For more information about this feature, please refer to the guide Set up integration with CrowdStrike.