---
title: Palo Alto Cortex Xsiam
slug: authentication-guides/palo-alto-cortex-xsiam
docTags: 
createdAt: 2026-07-27T12:10:00.603Z
---

# Introduction

This guide tells you how to authenticate the **Cortex XSIAM** connector in Swimlane using **API Key Authentication**.

You will generate an API Key, collect the required identifiers, and configure the connector in Swimlane.

# Prerequisites

## Cortex XSIAM Access Requirements

You must have permissions to:

- Access the **Cortex XSIAM** console.
- Create and manage API Keys.
- Access the Cortex XSIAM Public API.
- View incidents and alerts.
- Manage API integrations.

# Required Credentials

During setup, you will collect:

- API URL
- API Key
- API Key ID

## Cortex XSIAM Setup

Take the following steps to generate an API Key:

1. Log in to your **Cortex XSIAM** tenant.
2. Navigate to **Settings** > **Configurations** > **Integrations** > **API Keys**.
3. Click **+ New API Key**.
4. Enter a descriptive name for the key.
5. Select the appropriate role or permissions required for the integration.
6. (Optional) Configure an expiration date for the API key.
7. Click **Generate**.
8. Copy and securely save the **API Key**.

This saved value is your **Authorization** value in Swimlane.

Take the following steps to collect the API Key ID:

1. Navigate to **Settings** > **Configurations** > **Integrations** > **API Keys**.
2. Locate the API key you created.
3. Copy the **API Key ID**.

This value is your **x-xdr-auth-id** in Swimlane.

Take the following steps to collect the API URL:

1. Log in to your **Cortex XSIAM** tenant.
2. Copy your tenant URL from the browser.

Example:

https\://api-\<tenant>.xdr.\<region>.paloaltonetworks.com

Use your tenant URL as the **url** value in Swimlane.

# Connector Configuration in Swimlane

1. Log in to Turbine.
2. From the left-hand navigation pane, click **ORCHESTRATION** and click **Assets**.
3. Asset homepage opens.
4. Click the plus icon to open the **Configure your Connector Asset** window.
5. Select **Cortex XSIAM** from the Asset type list.
6. Fill in the Asset Settings and Asset Input as shown:

| **Field**         | **Description**                   | **Required/Optional** |
| ----------------- | --------------------------------- | --------------------- |
| **url**           | Cortex XSIAM Tenant API URL       | Required              |
| **Authorization** | API Key generated in Cortex XSIAM | Required              |
| **x-xdr-auth-id** | API Key ID                        | Required              |
| **verify\_ssl**   | Enable/Disable SSL Verification   | Optional              |
| **http\_proxy**   | Optional proxy configuration      | Optional              |

7. Fields with \* marks are required.
8. Click **Create**.

::Image[]{src="https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/mn4FvWFXbFAydrR6i4_-a_image.png" size="200" isUploading="false" width="800" height="405" darkWidth="800" darkHeight="405" showCaption="false"}

# Troubleshooting

## Authentication Failed (401 Unauthorized)

Verify that:

- The API Key is valid.
- The API Key has not expired.
- The API Key ID matches the API Key.
- The tenant URL is correct.

## Permission Denied (403 Forbidden)

Verify that:

- The API key has sufficient permissions.
- Your role allows access to Cortex XSIAM APIs.
- API access is enabled for your tenant.

## SSL Errors

If SSL verification fails:

- Verify that your Cortex XSIAM endpoint uses a trusted SSL certificate.
- Confirm that any proxy or firewall is not interfering with SSL traffic.
- Disable **verify\_ssl** only for testing if permitted by your organization's security policy.

### Result

You have successfully authenticated the **Cortex XSIAM** connector in Swimlane.

### Sources

- Cortex XSIAM REST API Documentation
  [https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-API](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-API)
- Cortex XSIAM API Authentication Documentation
  [https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-API/Get-Started-with-Cortex-XSIAM-APIs](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-API/Get-Started-with-Cortex-XSIAM-APIs)
- Cortex XSIAM API Keys Documentation
  [https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/API-Keys](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/API-Keys)