> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/onboard-a-supported-saas-application/onboard-sumo-logic.md).

# Onboard Sumo Logic

SaaS Security connects to the Sumo Logic API using an access key that you generate as the Sumo Logic account owner. After connecting, SaaS Security Checks scans your Sumo Logic instance for misconfigured settings and account risks.

Note: The supported Sumo Logic account plan for SaaS Security scans is the Enterprise plan.

The onboarding process requires the following credentials:

| Item             | Description                                                                                             |
| ---------------- | ------------------------------------------------------------------------------------------------------- |
| Admin Access ID  | A unique alphanumeric string that identifies the access key pair — analogous to a user ID.              |
| Admin Access Key | The secret credential SaaS Security Checks uses to authenticate API requests — analogous to a password. |
| Endpoint Region  | The region where Sumo Logic hosts your data.                                                            |

***

#### Step 1 — Generate a Sumo Logic access key

1. Identify the Sumo Logic account you will use to generate the access key.

Required permissions: You must generate the access key from the account designated as the Sumo Logic account owner — either the user who registered the account or a user later designated as owner.

2. Log in to Sumo Logic as the account owner.
3. Navigate to your preferences: click your profile icon in the upper-right corner and select \<profile-icon> > Preferences.
4. Select the Personal Access Keys tab and click Add Access Key.
5. In the Add New Access Key window, enter a meaningful name for the key — for example, SaaS-Security-Integration.
6. Under Scopes, select the Custom option and select the following scopes:

**Note**: Because the access key is generated from the account owner (highest privilege level), explicitly limit the key's permissions to the minimum required by SaaS Security Checks.

* Access Keys - View
* Access Keys - Manage
* Users And Roles - View
* Users And Roles - Manage
* Content admin
* Manage Library
* Run Log Search - View/Manage
* View Collectors
* View Security Settings
* View Account Status

7. Click Save. Sumo Logic generates the key and displays the Access ID and Access Key.
8. Copy the Access ID and Access Key and save them to a text file.

**Note**: Do not proceed until you have copied both values. You must provide them during onboarding.

***

#### Step 2 — Identify your endpoint region

Use the following table to determine your region based on your Sumo Logic login URL:

| URL                       | Region              |
| ------------------------- | ------------------- |
| api.au.sumologic.com      | AU (Australia)      |
| api.ca.sumologic.com      | CA (Canada)         |
| service.de.sumologic.com  | DE (Germany)        |
| service.eu.sumologic.com  | EU (European Union) |
| service.fed.sumologic.com | FED (US Government) |
| service.in.sumologic.com  | IN (India)          |
| service.jp.sumologic.com  | JP (Japan)          |
| service.sumologic.com     | US1 (United States) |
| service.us2.sumologic.com | US2 (United States) |

***

#### Step 3 — Connect SaaS Security Checks to Sumo Logic

1. Log in to [Cortex](https://cortex.paloaltonetworks.com).
2. Select **Modules > SaaS Security > Add Data Source** and click the Sumo Logic tile.
3. On the **Capabilities** tab, enter a name for this instance.
4. Under Default Capabilities, confirm Security Posture is selected.
5. Click Next.
6. On the **Connections** tab, select Log in with Credentials.
7. Enter your Admin Access ID, Admin Access Key, and Endpoint Region.
8. Click Next.
9. On the **Configurations** tab:
   1. Set the **Sync Interval**.
   2. (Optional) Add a **Tag**.
10. Click **Next** to complete onboarding.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/onboard-a-supported-saas-application/onboard-sumo-logic.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.