Skip to main content

Managing Connectors

The Connectors page is where you add new tools, monitor their sync health, and manage credentials for tools already connected.

Connector cards

Each configured connector shows as a card with a real health status:

  • 🟢 Green: the most recent sync succeeded.
  • 🟡 Yellow: configured but not yet synced, or a sync is currently running.
  • đź”´ Red: the most recent sync failed.

Click into a connector’s card to see its full sync history, including timing and record counts for every past run.

Adding a connector

Under Add a Connector, every supported tool you haven’t configured yet is listed, filterable by name or by the type of data it provides (devices, users, vulnerabilities, software). Selecting one takes you to its credentials form; see Connectors for exact setup instructions per tool, including exactly which credentials and permissions each one needs.

Multiple connections of the same tool

If you need to connect more than one instance of the same tool (for example, two separate Okta organizations), give each one a distinct connection name when adding it. Each named connection is credentialed, synced, and reported on independently.

Editing credentials

Opening an already-configured connector’s credentials form lets you update non-secret fields (like a base URL) directly. Secret fields (API keys, client secrets) are always shown blank for re-entry. Navigator never displays a previously-saved secret back to you, so updating credentials means re-supplying every secret field in full, not just the one that changed.

Deactivating a connection

If you’re retiring a tool (for example, migrating from one EDR to another) or a trial has ended, open its connector page and choose Deactivate. This needs an admin or credential manager, and asks you to confirm.

A deactivated connection:

  • is no longer synced, and any sync already queued for it is removed;
  • no longer counts toward coverage, so devices only that tool covered show up as uncovered (for example under “No EDR coverage”) straight away;
  • keeps its credentials and every record it already imported, which stay searchable.

It moves to a Deactivated section on the Connectors page, where Reactivate resumes syncing and queues one sync right away. Coverage on the Dashboard catches up within a few minutes of either change.

How coverage expires

A tool counts as covering a device only if it reported that device within the last 7 days, from a connection that is not deactivated. If a tool stops reporting a device (or the whole tool stops syncing), the device drops out of that coverage after 7 days even if other tools still report it. Search devices by Covered by to see which tools currently count.

Categorizing connectors (admin only)

Under Connectors → Categories, admins can assign each connected tool to one or more coverage categories (EDR, MDM, VA Scanner, Identity, CMDB); this is what drives the Dashboard’s exposure categories (for example, which connectors count toward “EDR coverage”). Sensible defaults are set automatically; this page lets you correct them if a tool serves a different purpose in your environment than the default assumes.

  • Connectors: setup instructions for each supported tool.
  • Dashboard: Source Coverage, the summarized version of connector health.
Next → Admin