Integrate with Absolute Secure Endpoint

In this topic, you will learn how to integrate Portnox™ Cloud with Absolute Secure Endpoint to provide device security information for risk assessment policies.

Generate an API token in Absolute

In this section, you will learn how to generate an API token in Absolute to integrate with Portnox Cloud.

  1. Log in to your Absolute tenant by accessing the following URL: https://ds.absolute.com/. Then, log in with your Absolute administrative credentials.
  2. In the bottom-left corner, click on the Settings menu, and then select the API management menu option.

  3. In the API management pane, click on the Create API token link or button.

  4. Add a name and an optional description for your API token in the Add title and Add description (optional) fields.

  5. In the Expiration field, set the token expiration date to the maximum possible validity period length (1 year).

    Important:
    You will have to create a new token and configure the integration again when the current token expires.
  6. In the Permissions section, set the permissions for the API token.

    By default, the API token has the permissions of the user creating the token, so you should remove all unnecessary permissions. The only required permission for integration with Portnox Cloud is Device reports. We recommend that you click the Clear button and then activate only the required permission.

  7. Click on the Save button to save the API token.

  8. In the Token Key Details section, copy the Token ID and the Secret key values to a temporary file. You will need to enter these values in Portnox Cloud later, and you cannot copy them later.

Configure the Absolute integration in Portnox Cloud

In this section, you will configure your Portnox Cloud tenant to use the API token created in Absolute in order to integrate with Absolute Secure Endpoint.

  1. In the Cloud portal top menu, click on the Settings option.

  2. In the Cloud portal left-hand menu, click on the Integration Services > ABSOLUTE SECURE ENDPOINT option.

  3. Under the ABSOLUTE SECURE ENDPOINT heading and description, click on the Edit link.

  4. Set the switch to the Enabled position.

  5. Enter the configuration values:

    1. In the API URI field, enter one of the following values, depending on the URL of your Absolute tenant:
      Tenant URL API URI
      https://cc.absolute.com https://api.absolute.com/jws/validate
      https://cc.us.absolute.com https://api.us.absolute.com/jws/validate
      https://cc.eu2.absolute.com https://api.eu2.absolute.com/jws/validate
    2. In the Token ID field, enter the token ID value copied earlier from Absolute.
    3. In the Secret Key field, enter the secret key value copied earlier from Absolute.
    4. Click on the Save button.
  6. Test your integration by clicking on the Test button.

    The successful response is: HTTP Response Status Code: OK.

After configuring the integration, adjust your risk assessment policies (look for the risk attribute called Not managed by Absolute Secure Endpoint).