> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security/cortex-cloud-saas-security/onboard-a-supported-saas-application/onboard-celonis.md). # Onboard Celonis For SaaS Security to detect posture risks in your Celonis instance, you must onboard your Celonis instance to SaaS Security. Through the onboarding process, SaaS Security connects to a Celonis API and, through the API, scans your Celonis instance for misconfigured settings. If there are misconfigured settings, SaaS Security suggests a remediation action based on best practices. SaaS Security gets access to your Celonis instance through an API access key. During the onboarding process, SaaS Security prompts you for the API access key and related information about your Celonis instance. To onboard your Celonis instance, complete the following actions: * Collect information for accessing your Celonis instance * Connect SaaS Security to your Celonis instance *** ### Step 1: Collect Information for Accessing Your Celonis Instance To access your Celonis instance, SaaS Security requires the following information, which you specify during the onboarding process. | Team API Key | A generated character string that identifies a Celonis administrator to the Celonis API. SaaS Security requires this API key to authenticate to the API. Required permissions: The API key must be generated by a user with admin access to your Celonis team. | | ------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Team domain | The URL for your Celonis team. | As you complete the following steps, make note of the values of the items described in the preceding table. You will need to enter these values during onboarding to access your Celonis instance from SaaS Security. 1. Identify your team domain URL. The URL for your team domain appears in the address bar of your browser and has the format https\://\.\.celonis.cloud. If you are not certain of your team domain URL, you can query Celonis for a list of all of your teams. To query Celonis for your team domain URL, open a web browser to . **Note**: Before you continue to the next step, make note of your team domain URL. You will provide this information to SaaS Security during the onboarding process. 2. Generate an API key for your team domain. 1. Log in to your Celonis team domain as an administrator. The API key inherits the access permissions of the administrator account that generates the key. The account must have Admin access to your team domain. 2. Select Profile menu > Edit Profile. 3. On the Edit Profile page, locate the API-Keys section. Enter a New API Key Name and click Create API Key. Celonis generates and displays a new API key. 4. Click Copy To Clipboard and paste the key into a text file. **Note**: Do not continue to the next step unless you have copied the API key. You must provide this key to SaaS Security during the onboarding process. *** ### Step 2: Connect SaaS Security to Your Celonis Instance By adding a Celonis app in Cortex, you enable SaaS Security to connect to your Celonis instance. 1. Log in to Cortex. 2. Select **Settings > Data Sources and Integrations > Add New**. You can use the Search bar to find the app you want to connect to. 3. Click the Celonis tile. 4. Under **Capabilities**, Enter a Name for your application. 5. Select Security Posture under Default Capabilities and click Next. 6. Under **Connections**, provide the API key and Team Domain. 7. Under **Configurations**, select a **Sync Interval**. Choose a meaningful **Tag** to distinguish between various applications in different environments. 8. Click **Next** to complete the onboarding validation process. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security/cortex-cloud-saas-security/onboard-a-supported-saas-application/onboard-celonis.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.