---
title: Palo Alto Networks Cortex Xpanse
slug: authentication-guides/palo-alto-networks-cortex-xpanse
docTags: 
createdAt: 2026-01-19T21:44:37.099Z
---

# Introduction

This guide explains how to authenticate the Palo Alto Networks Cortex Xpanse connector in Swimlane using Cortex Custom Authentication.

You will generate Cortex Xpanse API credentials, collect the required identifiers, and configure the connector inside Swimlane Turbine.

# Prerequisites

## Cortex Xpanse Access Requirements

- Access Settings and Integrations in Palo Alto Networks Cortex Xpanse
- Create and manage API keys
- Assign roles with Public API access
- View and manage assets, alerts, and incidents

## Required Credentials

- FQDN
- API Key
- API Key ID

# Authentication Method Overview

The Palo Alto Networks Cortex Xpanse connector uses Cortex Custom Authentication. Authentication is performed using an API Key and API Key ID associated with your Cortex Xpanse tenant.

# Cortex Xpanse Setup

## Generate an API Key

Take the following steps to generate an API key in Palo Alto Networks Cortex Xpanse:

1. Log in to the Cortex Xpanse console.
2. Navigate to **Settings & Info** >** Settings** > **Integrations** > **API Keys**.
3. Click **+ New Key**.
4. Select the API key type: **Standard or Advanced**.
5. Optionally enable an expiration date.
6. Assign a role with View/Edit permissions for the Public API.
7. Click **Generate**.
8. Copy the API Key and API Key ID.

# Connector Configuration in Swimlane

Take the following steps to configure the connector in Swimlane:

1. Log in to Turbine.
2. From the left-hand navigation pane, click **ORCHESTRATION** and click **Assets**.
   Asset homepage opens.
3. Click the **plus** icon to open the Configure your Connector Asset window.
4. Select **Palo** **Alto Cortex Xpanse** from the Asset type list.
5. Fill in the **Asset Settings **and **Asset Input** as shown:

## Configuration – Cortex Xpanse Authentication

| **Field**    | **Description**           | **Required** |
| ------------ | ------------------------- | ------------ |
| fqdn         | Cortex Xpanse tenant FQDN | Yes          |
| api\_key     | Cortex Xpanse API Key     | Yes          |
| api\_key\_id | Cortex Xpanse API Key ID  | Yes          |
| verify\_ssl  | Verify SSL certificate    | Optional     |
| http\_proxy  | Proxy configuration       | Optional     |

![](https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/zcaGNoMX--aDMjTPN93hv_image.png)

6. Click** Create**.

# Troubleshooting

**401 Unauthorized**

- Invalid or expired API Key
- Incorrect API Key ID
- API Key lacks Public API permissions

**Fix:**

- Verify API Key and API Key ID
- Regenerate the API Key if expired
- Ensure role has Public API access

You have successfully authenticated the Palo Alto Networks Cortex Xpanse connector in Swimlane.