Just received this email from Zoom (Zoom is integrated with our InsightIDR via a Zoom JWT app):
Migrate your JWT app by June 1, 2023
The JWT app type will be deprecated on June 1, 2023. After this date, you will no longer be able to use your JWT apps.
We recommend that you create Server-to-Server OAuth or an OAuth app to replace the functionality of a JWT app in your account.
See the FAQ for details.
The Zoom Pro documentation on InsightIDR integration documentation still shows to create a JWT app in Zoom for integration.
Link
Are there plans to update the integration method?
Hey @jason_macikanycz,
Thanks for flagging, work is already being lined up to update our Zoom event source & support the new authentication. We’re not sure on exact timing just yet, but it should be well before June.
Any questions just let me know,
Zoom changed the dates. You will no longer be able to create JWT apps on June 1, 2023. They will now stop working on September 1, 2023.
Finally received an email from Rapid7 on May 16 with a notice to update the Zoom data source in InsightIDR:
We’re reaching out because you leverage the Zoom event source in InsightIDR and need to take action to ensure InsightIDR continues to ingest Zoom logs.
Zoom is deprecating the JWT app type on June 1, 2023. To continue to ingest Zoom logs, you must create a Zoom Server-to-Server OAuth app before June 1, 2023.
What do you have to do?
- In Zoom, an administrator must create a Server-to-Server OAuth app, you may find this guide useful.
- Add the required scope: “report:read:admin”. More information is available here.
- Take note of the credentials provided in the Server-to-Server OAuth app on the app credentials tab (Account ID, Client ID, Client Secret).
- Set up the Zoom Event Source in InsightIDR with the new credentials.
For full details, please see Zoom’s documentation here and our help documentation.
If you have questions or concerns, please reach out to Rapid7 Support.
Thank you,
Rapid7 Customer Success