Skip to main content

Noru

The Noru integration exports your device compliance data from XFA to Noru, so your device evidence stays current there without manual uploads. XFA sends one asset per device and the results of its device checks. Like the other compliance integrations, it reports data; it does not enforce access.

Before you start

  • An XFA plan that includes GRC export
  • An XFA organization with devices connected
  • A Noru account with access to Developer Settings

Step 1: Create a Noru API key

  1. Sign in to Noru and open Developer Settings.
  2. Create a new API key.
  3. Enable only the Write Assets and Write Risks scopes. The integration needs no other permissions.
  4. Copy the key. You paste it into XFA in the next step.

Step 2: Connect XFA to Noru

  1. In the XFA dashboard, open Integrations.
  2. In the Export section, click Connect on the Noru card.
  3. Paste the key into Paste your Noru API key, then click Connect under Connect using Noru API.

The Noru card now shows Active and a Manage button. XFA saves the key and attempts to export your devices. The key is checked during synchronization, so an invalid key can connect and show Sync error later.

What XFA shares with Noru

  • Device identity and ownership: device name, model, operating system and assigned user, as one asset per device.
  • Security status: failing device checks are sent as open security findings on the asset, linked to a matching risk for your organization in Noru. Previously reported checks that pass are sent as resolved findings.

XFA never shares passwords, browsing data or files.

Connection status

The Noru card on the Integrations page shows the state of the connection:

StatusMeaning
ActiveThe connection is configured. This does not confirm that the API key is valid or that a sync has succeeded.
Not set upThe integration is not connected yet.
Sync errorXFA could not export data, usually because the API key is invalid or is missing a scope.

Troubleshooting

If the card shows Sync error:

  • Check that you pasted the full API key.
  • In Noru's Developer Settings, check that the key has both Write Assets and Write Risks.
  • Check that the key has not been revoked or regenerated in Noru.

If the problem continues, create a new API key in Noru and connect again from the Noru card, or contact support.