Overview
This user guide describes the OneLogin tool integration with Seceon aiSIEM through the API.
Prerequisite
The OneLogin API uses your subdomain as the API Domain. This is the same address you would use to log in to OneLogin. Generate the client id and client secret key, please follow the steps mentioned in the below link.
https://developers.onelogin.com/api-docs/2/getting-started/working-with-api-credentials
https://developers.onelogin.com/api-docs/2/getting-started/dev-overview
Steps of Configuration
To add the Seqrite Endpoint API method support follow the steps that are mentioned below:
Login Seceon UI: >provisioning >Add-on device >click on add button
To add OneLogin support, Follow the steps that are mentioned below.
Enter the name of the device.
Enter the CCE IP.
Note:
Select scope as Read All in the following API credential generation steps.
Now enter the generated client ID in Access ID/user name and client secret in the password/Secret Key section.
Now in the valid JSON Format in the last field, no need to put JSON ( only Add- {} ).
Click on the Save button.
Verification On the Seceon UI
Step 1: Log in to the Secon UI with Administrative Rights & Navigate to System>> Log/Flow Collection Status Option.
Steps 2: Inside Source Device IP, the IP Address of the Device will reflect including the no. of logs sent to the Seceon Servers.
