SecureWorks Taegis XDR

introduction this guide tells you how to authenticate the secureworks taegis xdr connector in swimlane using oauth 2 0 client credentials you will create an api client in taegis xdr, collect the required credentials, and configure the connector in swimlane prerequisites secureworks taegis xdr access requirements you must have permissions to access the secureworks taegis xdr portal create and manage api clients access the taegis graphql api manage oauth applications required credentials during setup, you will collect host url client id client secret (optional) oauth scope secureworks taegis xdr setup take the following steps to create an api client log in to the secureworks taegis xdr portal navigate to administration > api clients click create api client enter a name and description for the api client assign the required api permissions based on the actions you want the connector to perform click create copy and securely save the client id copy and securely save the client secret these values are used to authenticate the swimlane connector take the following steps to collect the host url log in to your secureworks taegis xdr tenant copy the tenant url from your browser example https //api \<region> taegis secureworks com use this value as the url during connector configuration oauth scope the swimlane connector supports an optional scope parameter if your secureworks administrator specifies oauth scopes for your api client, enter them in the connector configuration otherwise, leave this field blank connector configuration in swimlane log in to turbine from the left hand navigation pane, click orchestration and click assets asset homepage opens click the plus icon to open the configure your connector asset window select secureworks taegis xdr from the asset type list fill in the asset settings and asset input as shown field description required/optional url secureworks taegis xdr host url required client id oauth client id required client secret oauth client secret required scope oauth permission scopes (leave blank unless required) optional verify ssl enable/disable ssl verification optional http proxy optional proxy configuration optional fields with marks are required click create troubleshooting authentication failed (401 unauthorized) verify that the client id is correct the client secret is correct the api client has not been disabled the host url points to the correct taegis tenant permission denied (403 forbidden) verify that the api client has sufficient permissions the requested oauth scopes are allowed your organization permits api access unable to obtain oauth token verify that the client id and client secret match the oauth client has not expired the host url is correct network devices or proxies are not blocking outbound https requests ssl errors if ssl verification fails verify that the taegis xdr endpoint uses a trusted ssl certificate confirm that any corporate proxy is not intercepting ssl traffic disable verify ssl only for testing if permitted by your organization's security policy result you have successfully authenticated the secureworks taegis xdr connector in swimlane sources secureworks taegis xdr api getting started https //docs ctpx secureworks com/apis/using xdr apis/ https //docs ctpx secureworks com/apis/using xdr apis/ secureworks taegis xdr api authentication documentation https //docs ctpx secureworks com/apis/authentication/ https //docs ctpx secureworks com/apis/authentication/ secureworks taegis xdr graphql api documentation https //docs ctpx secureworks com/apis/graphql/ https //docs ctpx secureworks com/apis/graphql/ secureworks taegis xdr api reference https //docs ctpx secureworks com/apis/ https //docs ctpx secureworks com/apis/