> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/onboard-a-supported-saas-application/onboard-contentful.md).

# Onboard Contentful

For SaaS Security to detect posture risks in your Contentful instance, you must onboard your Contentful instance to SaaS Security. Through the onboarding process, SaaS Security connects to an API to scan your Contentful instance for misconfigured settings. If there are misconfigured settings, SaaS Security suggests a remediation action based on best practices.

SaaS Security gets access to Contentful's content management API by using a personal access token that you generate for a Contentful administrator account. During the onboarding process, SaaS Security prompts you for the personal access token.

To onboard your Contentful instance, complete the following actions:

* Create a personal access token in Contentful
* Connect SaaS Security to your Contentful instance

***

### Step 1: Create a Personal Access Token in Contentful

In Contentful, create a personal access token for an administrator account. The access token enables SaaS Security to carry out actions that require administrator permissions.

1. Open a web browser and go to the Contentful login page at [be.contentful.com/login](https://be.contentful.com/login).
2. Log in as an administrator.
3. Locate your profile icon and select \<profile-icon> > Account settings.
4. On the Account Settings page, navigate to the CMA Tokens tab and click Create personal access token.
5. In the Create personal access token dialog, specify a name and expiration date for the access token. You can also specify that the token should never expire.

**Note**: SaaS Security uses the access token to establish the initial connection to your Contentful instance and to perform scans at regular intervals. These scans will fail after the token expires, and you will need to onboard your Contentful instance again.

6. Click Generate. Contentful generates and displays your personal access token.
7. Copy the generated token and paste it into a text file.

Note: Do not continue to the next step unless you have copied the access token. You must provide this token to SaaS Security during the onboarding process.

***

### Step 2: Connect SaaS Security to Your Contentful Instance

By adding a Contentful app in Cortex, you enable SaaS Security to connect to your Contentful instance.

1. Log in to Cortex.
2. Select **Settings > Data Sources and Integrations > Add New**. You can use the Search bar to find the app you want to connect to.
3. Click the Contentful tile.
4. Under **Capabilities**, Enter a Name for your application.
5. Select Security Posture under Default Capabilities and click Next.
6. Under **Connections**, enter your personal access key.
7. Under **Configurations**, select a Sync Interval. Choose a meaningful **Tag** to distinguish between various applications in different environments.&#x20;
8. Click **Next** to complete the onboarding validation process.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/onboard-a-supported-saas-application/onboard-contentful.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.