AlienVault USM Anywhere

introduction this guide explains how to authenticate the alienvault usm anywhere connector in swimlane using oauth 2 0 client credentials you will register an api client in alienvault usm anywhere, collect the required credentials, and configure the connector asset in swimlane turbine prerequisites alienvault access requirements you must have administrative access to alienvault usm anywhere with permissions to create api integrations or api clients generate oauth client credentials access alarms and events through the api required credentials during setup you will collect alienvault api base url oauth token url client id client secret authentication method overview the alienvault usm anywhere connector authenticates using oauth 2 0 client credentials alienvault api setup take the following steps to create oauth credentials in alienvault usm anywhere log in to the alienvault usm anywhere console navigate to settings or api integrations create a new api client or integration choose oauth 2 0 client credentials as the authentication method generate the client id and client secret copy and securely store the client id and client secret locate the oauth token url for your alienvault api environment copy the api base url for your alienvault instance connector configuration in swimlane take the following steps to configure the alienvault usm anywhere connector asset in swimlane log in to turbine from the left hand navigation pane click orchestration and then assets the asset homepage opens click the plus icon to open the configure your connector asset window select alienvault usm anywhere from the asset type list fill in the asset settings and asset input as shown below configuration parameters true 220,220,221 unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type unhandled content type troubleshooting if authentication fails ensure the client id and client secret are correct verify the api base url and token url match your alienvault environment confirm that the api integration is active check ssl verification settings if using internal certificates validate proxy configuration if traffic is routed through a proxy sources alienvault usm anywhere api documentation https //cybersecurity att com/documentation/usm anywhere/api/ result you have successfully authenticated the alienvault usm anywhere connector in swimlane