CrowdStrike Falcon

You can use CrowdStrike Falcon as an Identity Integration for Identity and Trust. CrowdStrike Falcon sends information about endpoint users' IP addresses and devices to Identity and Trust.

  1. Go to Support and resources > API clients and keys.

    The API Clients and Keys window appears.

  2. Click Add new API client.

    The Create API client window appears.

  3. Enter these:

    1. Client name

    2. Description

  4. Select the relevant scopes:

    • Hosts - Read

    • NGSIEM - Read, Write

  5. Click Create.

    The API client created window appears.

  6. Click to copy Client ID, Secret Key and Base URL.

  7. Click Done.

  1. From the left toolbar, click Integrations.

  2. Click the + (plus sign) button.

  3. Select Identity Integrations > CrowdStrike Falcon.

    The CrowdStrike Falcon window opens.

  4. In the Integration Title field, enter a name for the integration to appear in Identity and Trust.

  5. In the CrowdStrike Falcon client ID field, paste the Client ID that you copied from CrowdStrike Falcon.

  6. In the Secret Key field, paste the Secret Key that you copied from CrowdStrike Falcon.

  7. In the CrowdStrike Falcon URL field, select the relevant URL for the region of your CrowdStrike Falcon environment.

  8. Click Test Connectivity.

  9. After a successful connectivity test, click Save.