Exabeam EUBA

introduction this guide tells you how to authenticate the exabeam euba (advanced analytics) connector in swimlane the connector supports three authentication methods api key authentication (exaauthtoken) oauth 2 0 client credentials http basic authentication oauth 2 0 client credentials is the recommended authentication method for new deployments this guide explains how to create an api client, collect the required credentials, and configure the connector in swimlane the connector also supports api key and http basic authentication for environments that use those authentication methods the connector details referenced below are from the uploaded swimlane connector documentation prerequisites exabeam access requirements you must have permissions to access the exabeam administration portal create api clients assign api scopes and permissions view your exabeam deployment url required credentials during setup, you will collect api base url token url (oauth only) client id client secret if using api key authentication exabeam authentication token (exaauthtoken) if using http basic authentication username password exabeam setup take the following steps to create an api client (oauth 2 0) log in to your exabeam administration console navigate to settings > core > admin operations > cluster authentication token click the + icon enter a token name select an expiry date choose the required default roles click add token click add new api client enter a name for the api client select the required api scopes click add copy and securely save client id client secret take the following steps to obtain the api url your api url depends on your deployment cloud example https //\<tenant> api exabeam com on premises example https //\<your server>/api take the following steps to obtain the oauth token url the oauth token endpoint is typically cloud https //\<tenant> api exabeam com/auth/v1/token or https //\<tenant> api exabeam com/oauth2/token depending on your exabeam deployment version if you are using an on premises deployment, obtain the token endpoint from your exabeam administrator take the following steps to generate an exaauthtoken (api key authentication) log in to the exabeam administration console navigate to settings > core > admin operations > cluster authentication token click the + icon enter a token name select an expiration date assign the required permissions click add token copy the generated exaauthtoken connector configuration in swimlane log in to turbine from the left hand navigation pane, click orchestration and click assets asset homepage opens click the plus icon to open the configure your connector asset window select exabeam euba from the asset type list oauth 2 0 client credentials fill in the asset settings and asset input as shown field description required/optional url exabeam api base url required token url oauth token url optional (recommended) client id client id required client secret client secret required verify ssl enable/disable ssl verification optional http proxy optional proxy configuration optional fields with marks are required click create api key authentication fill in the asset settings and asset input as shown field description required/optional url exabeam api base url required exaauthtoken exabeam authentication token required verify ssl enable/disable ssl verification optional http proxy optional proxy configuration optional fields with marks are required click create http basic authentication fill in the asset settings and asset input as shown field description required/optional url exabeam api base url required username exabeam username required password exabeam password required verify ssl enable/disable ssl verification optional http proxy optional proxy configuration optional fields with marks are required click create troubleshooting authentication failed verify that client id and client secret are correct exaauthtoken has not expired or been revoked username and password are correct if using basic authentication 401 unauthorised verify that oauth client credentials are valid the token endpoint is correct the api token has sufficient permissions 403 forbidden verify that the api client has the required scopes your exabeam account has permission to access the requested resources unable to connect verify that the api url is correct https connectivity to the exabeam server is available firewall or proxy settings allow outbound https traffic ssl certificate errors if ssl verification fails verify the server certificate is trusted import your organisation's ca certificate if required disable verify ssl only for testing if permitted by your organization's security policy result you have successfully authenticated the exabeam euba connector in swimlane sources exabeam developer documentation https //developers exabeam com/ https //developers exabeam com/ exabeam api authentication documentation https //developers exabeam com/docs/apis/authentication/ https //developers exabeam com/docs/apis/authentication/ exabeam api documentation https //developers exabeam com/reference/ https //developers exabeam com/reference/