This article was accurate at the time of writing, but changes happen. If you find the instructions are outdated, leave a description in the comment field below and let us know!
Step 1: Enable console access
Create a new user in OneLogin for Expel
-
In the OneLogin console, select Administration.
-
Select Users and then New User.
-
Fill in the following fields:
-
First name: Expel
-
Last name: SOC
-
Email: soc+<Your_Organization_Name>@expel.io
-
Username: same as email
-
Password: Set by user
-
Company: Expel
-
The other fields may be left blank.
-
-
Click Save User.
-
Notify your EM or CSE that the registration email has been sent.
Step 2: Generate API Credentials
-
Sign into your OneLogin as a user with Admin privileges.
-
Navigate to Administration.
-
Navigate to Developers > API Credentials.
-
Select New Credential.
-
Give the credential a name (such as ExpelAPI) and select Read All and click Save.
-
Save a copy of the Client ID and Client Secret.
Step 3: Configure the technology in Expel Workbench
-
Login to https://workbench.expel.io.
-
Navigate to Settings > Security Devices.
-
At the top right of the page, select Add New Device.
-
Search for and select OneLogin (direct).
-
Select Expel Cloud Service for the SIEM.
-
Give the device a Name and Location.
-
Fill in fields for Client Secret and Client ID with credentials generated in Step 2.
-
Specify the Region of the OneLogin device (US, EU).
Comments
0 comments
Article is closed for comments.