Celonis

Use Celonis data with Cortex XSIAM.

The capabilities and sub-capabilities listed for this connector are available with any active Cortex XSIAM or Cortex Cloud Posture Security license.

This connector includes the following capabilities and sub-capabilities (if applicable):

• SaaS Posture Configuration Monitoring: Detect, monitor and alert on settings of your SaaS application.

  • saas-posture-config-remediation: Help remediate the misconfigured security settings of your SaaS application.

How to configure the Celonis connector

To access Celonis, Cortex XSIAM requires the following information, which you will specify during the connection process.

• Team domain: The URL for your Celonis team.

• Team API key: A generated character string that identifies a Celonis administrator to the Celonis API. Cortex XSIAM requires this API key to authenticate to the API. Required permissions: The API key must be generated by a user with admin access to your Celonis team.

Perform the following procedures in the order that they appear below.

Task 1: Identify your team domain URL

1. The URL for your team domain appears in the address bar of your browser and has the format https://<team-domain>.<region>.celonis.cloud. If you are not certain of your team domain URL, you can query Celonis for a list of all of your teams. To query Celonis for your team domain URL, open a web browser to https://celonis.cloud/find-my-team. Before you continue to the next step, make note of your team domain URL. You will provide this information to Cortex XSIAM during the onboarding process.

Task 2: Generate an API key for your team domain

1. Log in to your Celonis team domain as an administrator. The API key inherits the access permissions of the administrator account that generates the key. The account must have Admin access to your team domain.

2. Select Profile menu > Edit Profile.

3. On the Edit Profile page, locate the API-Keys section. Enter a New API Key Name and click Create API Key. Celonis generates and displays a new API key.

4. Click Copy To Clipboard and paste the key into a text file. Do not continue to the next step unless you have copied the API key. You must provide this key to Cortex XSIAM during the onboarding process.

Task 3: Connect Celonis to Cortex XSIAM

1. In Cortex XSIAM, navigate to Settings → Data Sources & Integrations.

2. Click + Add new.

3. In the Add Data Source page, search for Celonis.

4. Under Recommended, hover over the new Celonis integration and click Add Instance to launch the configuration wizard.

5. Under the Capabilities tab, Enter a Name for your application.

6. Select Security Posture under Default Capabilities.

7. Click Next.

8. Under the Connection tab, enter the Team Domain and API key details.

9. Under the Configuration tab, select a Sync Interval. Choose a meaningful Tag to distinguish between various applications in different environments.

10. A confirmation message shows that your Celonis instance is successfully connected. Confirm the Summary details and click Save instance.