AlienVault USM Anywhere

Introduction

This guide explains how to authenticate the AlienVault USM Anywhere connector in Swimlane using OAuth 2.0 Client Credentials. You will register an API client in AlienVault USM Anywhere, collect the required credentials, and configure the connector asset in Swimlane Turbine.

Prerequisites

AlienVault Access Requirements

You must have administrative access to AlienVault USM Anywhere with permissions to:

Create API integrations or API clients

Generate OAuth client credentials

Access alarms and events through the API

Required Credentials

During setup you will collect:

AlienVault API Base URL

OAuth Token URL

Client ID

Client Secret

Authentication Method Overview

The AlienVault USM Anywhere connector authenticates using OAuth 2.0 Client Credentials.

AlienVault API Setup

Take the following steps to create OAuth credentials in AlienVault USM Anywhere:

Navigate to Settings or API Integrations.

Create a new API client or integration.

Choose OAuth 2.0 Client Credentials as the authentication method.

Generate the Client ID and Client Secret.

Copy and securely store the Client ID and Client Secret.

Locate the OAuth Token URL for your AlienVault API environment.

Copy the API Base URL for your AlienVault instance.

Connector Configuration in Swimlane

Take the following steps to configure the AlienVault USM Anywhere connector asset in Swimlane.

From the left-hand navigation pane click ORCHESTRATION and then Assets.

The Asset homepage opens.

Click the plus icon to open the Configure your Connector Asset window.

Select AlienVault USM Anywhere from the Asset type list.

Fill in the Asset Settings and Asset Input as shown below.

Configuration Parameters

Field	Description	Required
url	Base URL for the AlienVault USM Anywhere API	Required
token_url	OAuth token endpoint URL	Optional
client_id	OAuth Client ID generated in AlienVault	Required
client_secret	OAuth Client Secret generated in AlienVault	Required
verify_ssl	Enable or disable SSL certificate verification	Optional
http_proxy	Proxy configuration	Optional

Troubleshooting

If authentication fails:

Ensure the Client ID and Client Secret are correct.

Verify the API Base URL and Token URL match your AlienVault environment.

Confirm that the API integration is active.

Check SSL verification settings if using internal certificates.

Validate proxy configuration if traffic is routed through a proxy.

Sources

AlienVault USM Anywhere API Documentation: https://cybersecurity.att.com/documentation/usm-anywhere/api/

Result

You have successfully authenticated the AlienVault USM Anywhere connector in Swimlane.