Procedure

1. In the Identity Security Posture Management console, go to Inventory > Non-human identities > Workload identities.
2. Review the summaries at the top of the page.
   • Workload identities: The total number of workload identities discovered across all connected sources
   • Identities by source: A summary of workload identities by identity provider: Okta, Salesforce, or Microsoft Entra ID
   • Identities and credentials: A summary of workload identities grouped by their authentication method
   • Credential rotation: A summary of credential rotation status across all workload identities, highlighting apps with stale or unrotated credentials
3. Review the workload apps table.
   • Workload identity name: The name of the workload identity, with an icon indicating its source: Okta, Microsoft Entra ID, or Salesforce
   • Active credentials: All authentication methods configured for the app, such as client secrets and certificates
   • Last rotation: The oldest credential rotation date across all sign-in methods for the app
   • High privileges: The app's permission level (non-privileged, privileged, or high privileges)
   • Status: Active, inactive, or expired
   • Date created: The date the workload identity was created
4. Review the credential details in the side pane.
   • Creation time: When the credential was created
   • Expires at: The date when the credentials expire, if applicable
   • Status: Active, inactive, or expired
5. Review the permissions details in the side pane.
   • Permission name: The permission as it's named in the app
   • Permission type: Role, API scope, app permissions, or delegated permissions
   • Target application: The app where the permission applies