Domain-scoped API key. Generate and manage keys from the API Keys
page in Settings. Pass via the X-API-Key header.
Connector type identifier
outlook, teams, msft-calendar, office365, sentinel, azure_ad, defender, duo, okta, ping_identity, cyberark, beyondtrust, saviynt, sailpoint, one_identity, crowdstrike, carbon_black, sentinelone, splunk, qradar, elastic_siem, zscaler, palo_alto, aws_cloudtrail, google_workspace, github, servicenow, lenel, genetec Integration detail
Connector type identifier
outlook, teams, msft-calendar, office365, sentinel, azure_ad, defender, duo, okta, ping_identity, cyberark, beyondtrust, saviynt, sailpoint, one_identity, crowdstrike, carbon_black, sentinelone, splunk, qradar, elastic_siem, zscaler, palo_alto, aws_cloudtrail, google_workspace, github, servicenow, lenel, genetec Security signal category
core_iam, mfa, passwordless, device_trust, physical_access, communications, productivity, saas, iga, endpoint_security, pam, network, zero_trust, cloud, infrastructure Signal types this connector contributes to
Security signal category
core_iam, mfa, passwordless, device_trust, physical_access, communications, productivity, saas, iga, endpoint_security, pam, network, zero_trust, cloud, infrastructure Whether a connector record exists for this domain
Whether the connector is currently enabled
active — Connector is enabled and has polled successfullydegraded — Connector is enabled but has 3+ consecutive failuresdisabled — Connector exists but has been disabledpending — Connector is enabled but has never polled successfullynot_configured — No connector record exists for this domainactive, degraded, disabled, pending, not_configured Present only when the connector is configured
Number of active ingest subscriptions (e.g. Outlook/Teams webhooks)