Shopify

Use Shopify SaaS posture monitoring data for Cortex XSIAM.

The capabilities and sub-capabilities listed for this connector are available with any active Cortex XSIAM or Cortex Cloud Posture Security license.

This connector includes the following capabilities and sub-capabilities (if applicable):

• SaaS Posture Configuration Monitoring: Detect, monitor and alert on settings of your SAAS application.

  • saas-posture-config-remediation: Help remediate the misconfigured security settings of your SAAS application.

How to configure the Shopify connector

To access Shopify, Cortex XSIAM requires the following information, which you will specify during the connection process.

• API Token: A unique alphanumeric string that Shopify generates for a custom app you create. SaaS Security uses this token to authenticate to the Shopify API with the scopes specified in the custom app.

• Store Name: The permanent subdomain identifier for your store, derived from the default URL Shopify assigned: <store-name>.myshopify.com.

Cortex XSIAM supports the Shopify Plus plan. The steps below connect a single Shopify store. To scan multiple stores, connect each store separately.

Task 1: Identify the Shopify account

Identify the Shopify account you will use to create the custom app. Required permissions: The account must be assigned to the Organization Owner role to create a custom app and generate an API token.

Task 2: Create a custom app and generate an API token

1. Open a browser to the Shopify admin login page and log in to the store you want Cortex XSIAM to scan.

2. Click Settings in the lower-left corner to open store settings.

3. From the left navigation pane, select Apps and sales channels.

4. Click Develop apps.

5. Click Create app.

6. In the Create an app dialog, enter a name for the app and click Create app. Shopify displays a tabbed configuration page for the new app.

7. On the Configuration tab, configure the Admin API Integration scopes:

   1. Click Configure under Admin API Integration.

   2. Select the following scopes:

      • read_apps

      • read_privacy_settings

Note: The read_users scope is also required but is restricted by default and not available for selection here. You will request access to this scope from Shopify Plus Support in a later step.

1. Click Save.

2. On the API credentials tab, click Install app, then confirm by clicking Install in the dialog.

3. Contact Shopify Plus Support to request access to the read_users scope for your app:

   1. In the upper-right corner of the page, locate your store's brand name (default: My Store) and select <brand-name> > Shopify Plus Support.

   2. Click Chat with us and ask the support agent to enable the read_users scope for your application. It can take a few minutes to an hour for Shopify Plus Support to enable the scope.

4. After Shopify Plus Support enables read_users, add the scope to your app:

   1. On the Configuration tab, click Edit under Admin API Integration.

   2. Select the read_users scope.

   3. Click Save.

5. On the API credentials tab, click Reveal token once to display the API token.

6. Copy the API token and save it to a text file. Do not proceed until you have copied the API token. You must provide it during the onboarding process.

Task 3: Identify your store name

Your store name is the subdomain of the default URL Shopify assigned when you created the store (<store-name>.myshopify.com).

1. Click Settings in the lower-left corner to open store settings.

2. In the left navigation pane, locate the default URL for your store. The store name is the value before .myshopify.com.

Task 4: Connect Shopify to Cortex XSIAM

1. In Cortex XSIAM, navigate to Settings → Data Sources & Integrations.

2. Click + Add new.

3. In the Add Data Sources or Integrations page, search for Shopify.

4. Under Recommended, hover over the new Shopify integration and click Add Instance to launch the configuration wizard.

5. Under the Capabilities tab, Enter a Name for your application.

6. Select Security Posture under Default Capabilities.

7. Click Next.

8. Under Connection, enter the API Token and Store Name.

9. Under Configuration tab, select a Sync Interval. Choose a meaningful Tag to distinguish between various applications in different environments.

10. A confirmation message indicates that Shopify is successfully connected. Confirm the Summary details and click Save instance.