How it works

Configuration guide

A ClearTax-style walkthrough: what to turn on in TRACEOPS, what to configure in linked apps, and how you prove it to an auditor.

1. Hub & SSO

TRACEOPS is launched from OrganizationOS so buyers keep one session.

  • In OrganizationOS Admin → enable TRACEOPS on the plan and set Base URL (e.g. https://tracepos.tibasidas.com).
  • Quick connect credentials (service user / API) if Copilot must read governance.
  • From Home, open TRACEOPS — you should land on /auth/platform then Overview.

2. Create an ingestion API key

Every external system posts events with this key.

  • TRACEOPS → Admin → Settings & API keys → create ingestion key.
  • Store the key in your secret store. Header: X-API-Key.
  • Endpoints: POST /v1/webhooks/generic (actor + action) or kit-specific webhooks.

3. Connector wizard (kit → key → green)

Buyers should see HEALTHY within minutes.

  1. Open Connectors → pick a kit.
  2. Confirm the ingestion key exists.
  3. Run Test / Send first event (CONNECTOR_HEARTBEAT).
  4. Status HEALTHY + last success timestamp = green for the demo.

4. What to configure in linked apps

App Configuration Result in TRACEOPS
OrganizationOS / Copilot TRACEOPS base URL + credentials; chat audit publisher enabled Copilot answers cite TRACEOPS; “Open in TRACEOPS”; digests can land on the trail
WorkComply TraceOps:BaseUrl + TraceOps:IngestApiKey Audit day → Export to TRACEOPS creates WORKCOMPLY_AUDIT_EXPORT
HR / ZATCA / Helpdesk / Finance POST status/export events to /v1/webhooks/generic with X-API-Key Activity timeline + optional alerts from detection rules
Microsoft 365 / Okta Federate IdP to Tiba SSO (Keycloak); map groups → IAM roles Same people open hub + TRACEOPS without a second password

5. Daily operations

  • Overview — KPIs and “Do this next”.
  • Alerts — acknowledge, assign, resolve; set Escalations SLA for buyers.
  • Investigate / Detections — when you need deeper forensics (kept under More in the app).

6. Evidence packs

  • Evidence → choose a named template (24h / 7d / 30d / full ZIP).
  • Generate → download → verify integrity later from report history.
  • From Copilot Compliance mode: generate pack action after sources are connected.

7. Go-live checklist

  • □ SSO launch from OrganizationOS works
  • □ Ingestion key created and stored
  • □ At least one connector HEALTHY
  • □ One open alert worked end-to-end (or sample queue)
  • □ One evidence PDF/ZIP downloaded
  • □ Optional: Copilot citation opens /alerts or /evidence
  • □ Optional: WorkComply audit export succeeds

Open the same guide inside the app Back to TRACEOPS