OVERVIEW
SpyCloud’s integration with Okta Identity Threat Protection (ITP) uses the Shared Signals Framework (SSF) to convert identity exposures into actionable risk signals. When SpyCloud detects exposed employee credentials – whether from successful phishing attacks, infostealer malware, breaches, or combolists – Okta ITP continuously ingests those signals to update user risk levels, trigger adaptive authentication, and initiate automated remediation.