CrowdStrike Falcon

When you try to connect CrowdStrike to 1Password SaaS Manager you will be asked for a client ID, secret and base URL. This article shows you how to find and create API clients.

Log in to CrowdStrike and navigate to API Clients and Keys.

mceclip0.png

Click Add new API client.

mceclip1.png

Add a Client name for the API client, e.g. 1Password SaaS Manager and select the required API Scopes (Permissions).

These will depend on what features you want to manage through SaaS Manager.

Feature API Scopes
Default User management (Read)
Devices

Hosts (Read)

Host Groups (Read)
Hosts (Write)
(Optional but required for host containment actions)

Falcon Discover (Read)
(Optional but provides additional information like host metrics)
Provisioning or Deprovisioning User management (Write)

Click Add to create the API client.

Copy the API client details to a safe place, each of these can then be used when connecting CrowdStrike to SaaS Manager.

mceclip3.png

 

Was this article helpful?

0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.