Exabeam EUBA

Introduction

This guide tells you how to authenticate the Exabeam EUBA (Advanced Analytics) connector in Swimlane.

The connector supports three authentication methods:

API Key Authentication (ExaAuthToken)

OAuth 2.0 Client Credentials

HTTP Basic Authentication

OAuth 2.0 Client Credentials is the recommended authentication method for new deployments. This guide explains how to create an API client, collect the required credentials, and configure the connector in Swimlane. The connector also supports API Key and HTTP Basic Authentication for environments that use those authentication methods. The connector details referenced below are from the uploaded Swimlane connector documentation.

Prerequisites

Exabeam Access Requirements

You must have permissions to:

Access the Exabeam Administration portal.

Create API Clients.

Assign API scopes and permissions.

View your Exabeam deployment URL.

Required Credentials

During setup, you will collect:

API Base URL

Token URL (OAuth only)

Client ID

Client Secret

If using API Key Authentication:

Exabeam Authentication Token (ExaAuthToken)

If using HTTP Basic Authentication:

Username

Password

Exabeam Setup

Take the following steps to create an API Client (OAuth 2.0)

Navigate to Settings > Core > Admin Operations > Cluster Authentication Token.

Click the + icon.

Enter a Token Name.

Select an Expiry Date.

Choose the required Default Roles.

Click Add Token.

Click Add New API Client.

Enter a name for the API Client.

Select the required API scopes.

Click Add.

Copy and securely save:

Client ID

Client Secret

Take the following steps to obtain the API URL

Your API URL depends on your deployment.

Cloud example:

https://<tenant>.api.exabeam.com

On-premises example:

https://<your-server>/api

Take the following steps to obtain the OAuth Token URL

The OAuth token endpoint is typically:

Cloud:

https://<tenant>.api.exabeam.com/auth/v1/token

https://<tenant>.api.exabeam.com/oauth2/token

depending on your Exabeam deployment version.

If you are using an on-premises deployment, obtain the token endpoint from your Exabeam administrator.

Take the following steps to generate an ExaAuthToken (API Key Authentication)

Navigate to Settings > Core > Admin Operations > Cluster Authentication Token.

Click the + icon.

Enter a token name.

Select an expiration date.

Assign the required permissions.

Click Add Token.

Copy the generated ExaAuthToken.

Connector Configuration in Swimlane

From the left-hand navigation pane, click ORCHESTRATION and click Assets.

Asset homepage opens.

Click the plus icon to open the Configure your Connector Asset window.

Select Exabeam EUBA from the Asset type list.

OAuth 2.0 Client Credentials

Fill in the Asset Settings and Asset Input as shown:

Field	Description	Required/Optional
url	Exabeam API Base URL	Required
token_url	OAuth Token URL	Optional (recommended)
client_id	Client ID	Required
client_secret	Client Secret	Required
verify_ssl	Enable/Disable SSL Verification	Optional
http_proxy	Optional proxy configuration	Optional

Fields with * marks are required.

Click Create.

API Key Authentication

Fill in the Asset Settings and Asset Input as shown:

Field	Description	Required/Optional
url	Exabeam API Base URL	Required
ExaAuthToken	Exabeam Authentication Token	Required
verify_ssl	Enable/Disable SSL Verification	Optional
http_proxy	Optional proxy configuration	Optional

Fields with * marks are required.

Click Create.

HTTP Basic Authentication

Fill in the Asset Settings and Asset Input as shown:

Field	Description	Required/Optional
url	Exabeam API Base URL	Required
username	Exabeam Username	Required
password	Exabeam Password	Required
verify_ssl	Enable/Disable SSL Verification	Optional
http_proxy	Optional proxy configuration	Optional

Fields with * marks are required.

Click Create.

Troubleshooting

Authentication Failed

Verify that:

Client ID and Client Secret are correct.

ExaAuthToken has not expired or been revoked.

Username and password are correct if using Basic Authentication.

401 Unauthorised

Verify that:

OAuth client credentials are valid.

The token endpoint is correct.

The API token has sufficient permissions.

403 Forbidden

Verify that:

The API client has the required scopes.

Your Exabeam account has permission to access the requested resources.

Unable to Connect

Verify that:

The API URL is correct.

HTTPS connectivity to the Exabeam server is available.

Firewall or proxy settings allow outbound HTTPS traffic.

SSL Certificate Errors

If SSL verification fails:

Verify the server certificate is trusted.

Import your organisation's CA certificate if required.

Disable verify_ssl only for testing if permitted by your organization's security policy.

Result

You have successfully authenticated the Exabeam EUBA connector in Swimlane.

Sources

Exabeam Developer Documentation https://developers.exabeam.com/

Exabeam API Authentication Documentation https://developers.exabeam.com/docs/apis/authentication/

Exabeam API Documentation https://developers.exabeam.com/reference/