Back

PingOne DaVinci Connector

IAM

Read Docs
OVERVIEW

The SpyCloud DaVinci Connector is the essential security layer that brings exposure intelligence directly into your PingOne DaVinci identity flows. By proactively checking if a credential has been compromised in a malware infection, phishing attack, or third-party breach, the connector eliminates the security blind spot created by employee password reuse. This seamless integration ensures only trusted credentials proceed, dramatically strengthening your security posture and protecting your employees from account takeover.

SpyCloud’s Connector installs as a native drag-and-drop connector in the DaVinci flow studio. At any workforce identity event — login, account creation, or password reset — it checks employee credentials against SpyCloud’s continuously updated database of recaptured identity data from the criminal underground and drives automated enforcement within your existing flows. No custom development required.

BENEFITS
  • Block known-exposed credentials at login, account creation, and password reset before attackers can use them
  • Trigger step-up MFA based on confirmed real-world exposure, not behavioral assumptions
  • Enforce credential hygiene during onboarding and IT reset flows
  • Get ahead of the threat - SpyCloud recaptures identity data weeks to months before it surfaces publicly
  • Deploy in minutes as a native DaVinci connector with no custom development
HOW IT WORKS

A typical password reset flow looks like this:

  • Trigger
    A password reset, password change, login, or account creation event is initiated.
  • Collect credentials
    The user's email address and newly selected password are captured by the DaVinci flow.
  • Query SpyCloud
    The connector passes the credential pair to SpyCloud, which checks whether it appears in its recaptured database of identity data from the criminal underground.
  • Evaluate result
    SpyCloud returns Exposed or Not Exposed.
  • Take action
    Based on the result, the flow enforces a new password selection, routes to step-up MFA, notifies your security team, or allows the event to proceed.