CrowdStrike Falcon

When you try to connect CrowdStrike to 1Password SaaS Manager you will be asked for a client ID, secret and base URL. This article shows you how to find and create API clients.

Log in to CrowdStrike and navigate to API Clients and Keys.

CrowdStrike Falcon search results showing the API clients and keys page

Click Add new API client.

CrowdStrike API Clients and Keys page with Add new API client highlighted

Add a Client name for the API client, for example 1Password SaaS Manager and select the required API Scopes (Permissions).

These will depend on what features you want to manage through SaaS Manager.

FeatureAPI Scopes
DefaultUser management (Read)
Devices

Hosts (Read)

Host Groups (Read)
Hosts (Write)
(Optional but required for host containment actions)

Falcon Discover (Read)
(Optional but provides additional information like host metrics)

Provisioning or DeprovisioningUser management (Write)

CrowdStrike Add new API client dialog with the client name field, API scope permissions, and Add button highlighted

Click Add to create the API client.

Copy the API client details to a safe place, each of these can then be used when connecting CrowdStrike to SaaS Manager.

CrowdStrike API client created dialog showing the client ID, secret, and base URL with copy controls


Published: