--- title: Exabeam EUBA slug: authentication-guides/exabeam-euba docTags: createdAt: 2026-07-27T12:27:02.047Z --- # Introduction This guide tells you how to authenticate the **Exabeam EUBA (Advanced Analytics)** connector in Swimlane. The connector supports three authentication methods: - API Key Authentication (ExaAuthToken) - OAuth 2.0 Client Credentials - HTTP Basic Authentication OAuth 2.0 Client Credentials is the recommended authentication method for new deployments. This guide explains how to create an API client, collect the required credentials, and configure the connector in Swimlane. The connector also supports API Key and HTTP Basic Authentication for environments that use those authentication methods. The connector details referenced below are from the uploaded Swimlane connector documentation. # Prerequisites ## Exabeam Access Requirements You must have permissions to: - Access the Exabeam Administration portal. - Create API Clients. - Assign API scopes and permissions. - View your Exabeam deployment URL. # Required Credentials During setup, you will collect: - API Base URL - Token URL (OAuth only) - Client ID - Client Secret If using API Key Authentication: - Exabeam Authentication Token (ExaAuthToken) If using HTTP Basic Authentication: - Username - Password ## Exabeam Setup Take the following steps to create an API Client (OAuth 2.0) 1. Log in to your **Exabeam** Administration Console. 2. Navigate to **Settings** > **Core** > **Admin Operations** > **Cluster Authentication Token**. 3. Click the **+** icon. 4. Enter a **Token Name**. 5. Select an **Expiry Date**. 6. Choose the required **Default Roles**. 7. Click **Add Token**. 8. Click **Add New API Client**. 9. Enter a name for the API Client. 10. Select the required API scopes. 11. Click **Add**. 12. Copy and securely save: - **Client ID** - **Client Secret** Take the following steps to obtain the API URL Your API URL depends on your deployment. Cloud example: https\://\.api.exabeam.com On-premises example: https\://\/api Take the following steps to obtain the OAuth Token URL The OAuth token endpoint is typically: Cloud: https\://\.api.exabeam.com/auth/v1/token or https\://\.api.exabeam.com/oauth2/token depending on your Exabeam deployment version. If you are using an on-premises deployment, obtain the token endpoint from your Exabeam administrator. **Take the following steps to generate an ExaAuthToken (API Key Authentication)** 1. Log in to the **Exabeam** Administration Console. 2. Navigate to **Settings** > **Core** > **Admin Operations** > **Cluster Authentication Token**. 3. Click the **+** icon. 4. Enter a token name. 5. Select an expiration date. 6. Assign the required permissions. 7. Click **Add Token**. 8. Copy the generated **ExaAuthToken**. ## Connector Configuration in Swimlane 1. Log in to Turbine. 2. From the left-hand navigation pane, click **ORCHESTRATION** and click **Assets**. 3. Asset homepage opens. 4. Click the plus icon to open the **Configure your Connector Asset** window. 5. Select **Exabeam EUBA** from the **Asset type** list. ## OAuth 2.0 Client Credentials Fill in the **Asset Settings** and **Asset Input** as shown: | **Field** | **Description** | **Required/Optional** | | -------------- | ------------------------------- | ---------------------- | | url | Exabeam API Base URL | Required | | token\_url | OAuth Token URL | Optional (recommended) | | client\_id | Client ID | Required | | client\_secret | Client Secret | Required | | verify\_ssl | Enable/Disable SSL Verification | Optional | | http\_proxy | Optional proxy configuration | Optional | Fields with \* marks are required. 6. Click **Create**. ::Image[]{src="https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/M4bRaXKbfI7AV-HtZ052Z_image.png" size="200" isUploading="false" width="800" height="409" darkWidth="800" darkHeight="409" showCaption="false"} ## API Key Authentication Fill in the **Asset Settings** and **Asset Input** as shown: | **Field** | **Description** | **Required/Optional** | | ------------ | ------------------------------- | --------------------- | | url | Exabeam API Base URL | Required | | ExaAuthToken | Exabeam Authentication Token | Required | | verify\_ssl | Enable/Disable SSL Verification | Optional | | http\_proxy | Optional proxy configuration | Optional | Fields with \* marks are required. Click **Create**. ::Image[]{src="https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/1BhldXeZpevwQT1nx224e_image.png" size="200" isUploading="false" width="800" height="411" darkWidth="800" darkHeight="411" showCaption="false"} ## HTTP Basic Authentication Fill in the **Asset Settings** and **Asset Input** as shown: | **Field** | **Description** | **Required/Optional** | | ----------- | ------------------------------- | --------------------- | | url | Exabeam API Base URL | Required | | username | Exabeam Username | Required | | password | Exabeam Password | Required | | verify\_ssl | Enable/Disable SSL Verification | Optional | | http\_proxy | Optional proxy configuration | Optional | Fields with \* marks are required. Click **Create**. ::Image[]{src="https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/urxUtZa4s60e4i8ryY5vt_image.png" size="200" isUploading="false" width="800" height="406" darkWidth="800" darkHeight="406" showCaption="false"} # Troubleshooting ### Authentication Failed Verify that: - Client ID and Client Secret are correct. - ExaAuthToken has not expired or been revoked. - Username and password are correct if using Basic Authentication. ### 401 Unauthorised Verify that: - OAuth client credentials are valid. - The token endpoint is correct. - The API token has sufficient permissions. ### 403 Forbidden Verify that: - The API client has the required scopes. - Your Exabeam account has permission to access the requested resources. ### Unable to Connect Verify that: - The API URL is correct. - HTTPS connectivity to the Exabeam server is available. - Firewall or proxy settings allow outbound HTTPS traffic. ### SSL Certificate Errors If SSL verification fails: - Verify the server certificate is trusted. - Import your organisation's CA certificate if required. - Disable **verify\_ssl** only for testing if permitted by your organization's security policy. ### Result You have successfully authenticated the **Exabeam EUBA** connector in Swimlane. ### Sources - Exabeam Developer Documentation [https://developers.exabeam.com/](https://developers.exabeam.com/) - Exabeam API Authentication Documentation [https://developers.exabeam.com/docs/apis/authentication/](https://developers.exabeam.com/docs/apis/authentication/) - Exabeam API Documentation [https://developers.exabeam.com/reference/](https://developers.exabeam.com/reference/)