Part of Lumos Launchpad: Foundation, step 1.
Background
This article shows you how to activate your Lumos account by connecting your email provider, identity provider, Slack, and other integrations. After setup, you can use Lumos to:- Design roles and policies: Use Albus to mine roles and draft RBAC and ABAC policies from key attributes and real usage, so least privilege stays current as your organization changes.
- Run Access Reviews: Review human and non-human identity (NHI) access in the same campaign, with explainable decisions, automatic remediation, and audit-ready evidence.
- Automate access: Use Joiner-Mover-Leaver workflows, the Lumos AppStore, and Just-in-Time (JIT) access so employees get the access they need and IT handles fewer tickets.
Step 1: Connect your email provider
Lumos builds your app catalog by:- Finding all apps your employees logged in to through your email provider.
- Running an AI algorithm on your email subject lines to find apps your employees signed up for using a username and password.
- Go to app.lumosidentity.com and log in with Google using an account with access to Google domain-wide delegation.
- After you log in with Google, an onboarding page opens with steps to connect Google Workspace. Complete these steps and click Start Account Discovery to finish the setup.
- Go to app.lumosidentity.com and log in with Microsoft using your Admin account.
- After you log in, Lumos redirects you to accept the OAuth scopes it requests for Office365. Accept these scopes to finish the setup.