Skip to main content

Drata

Overview​

The XFA-Drata integration enables automated device information sharing for compliance monitoring. This integration automatically collects and uploads device data to your Drata dashboard.

Prerequisites​

  • Active XFA account
  • Drata account with API access
  • Enrolled devices in XFA

Setup Guide​

To connect XFA with Drata, follow these steps:

  1. Go to your XFA dashboard
  2. Navigate to the "Devices" section
  3. Click the "Export" dropdown
  4. Select "Drata"

You'll need three values from Drata to establish the connection:

Step 1: Get Your Drata API Key​

  • Log in to your Drata account
  • Click 'Connections' in the left bottom menu
  • Select 'MDM' in the types table
  • Ensure 'Available Connections' is selected
  • Search for 'XFA' and click '+ Connect'
  • Under 'Setup your Public API Key' select 'Create an API key'
  • Click 'Create'
  • Copy the API key shown on the screen
  • Save the API key in a secure location
  • Paste the API key in the text field in your XFA dashboard
warning

If you run into connection issues, check the Drata API key scopes to ensure it has read/write access for all devices and read permissions for list/get personnel.

Step 2: Select Your Drata Region​

Select the region that matches your Drata account:

  • US — your Drata account is hosted at https://public-api.drata.com
  • EU — your Drata account is hosted at https://public-api.eu.drata.com

If you are unsure which region applies, use the API/webhook URL Drata shows when configuring the XFA connection (see Step 3); the hostname in that URL (for example, public-api.drata.com or public-api.eu.drata.com) determines your region.

Step 3: Find Your Connection ID​

When setting up the XFA connection in Drata, Drata provides a code snippet or webhook URL that contains your Connection ID. It appears in one of these formats depending on your region:

# US
https://public-api.drata.com/public/custom-connections/[CONNECTION_ID]/devices

# EU
https://public-api.eu.drata.com/public/custom-connections/[CONNECTION_ID]/devices

Copy the UUID between /custom-connections/ and /devices — that is your Connection ID.

Once you've completed these steps, your XFA devices will automatically start sending device information to your Drata dashboard.

What Data is Shared​

The integration shares the following device information with Drata:

  • Device name and identifier
  • Operating system version
  • Security status
  • Last check-in time
  • Compliance status
  • Device ownership information

Troubleshooting​

If you encounter any issues during the setup process:

  • Ensure you have the correct permissions in both XFA and Drata
  • Verify that your API key is correctly copied and pasted
  • Confirm the Drata API key scopes include read/write for all devices and read access for list/get personnel
  • Make sure the selected region matches your Drata account's region
  • Check that the Connection ID is correctly extracted from the Drata URL
  • Make sure your devices are properly enrolled in XFA

For additional support, please contact our support team.