CrowdStrike Falcon Integration Setup

Getting Started

Use this guide to connect CrowdStrike Falcon to your BalkanID tenant. You will need credentials from CrowdStrike and access to the Integrations section in BalkanID.

Requirements:

Before you begin, collect the following values from CrowdStrike Falcon:

• Client ID

• Client Secret

• Region

Configure Crowdstrike Falcon within your BalkanID tenant

1. To find the Client ID and Client Secret, Region. Sign in to your CrowdStrike account.

2. Navigate to Support & Resources > API Clients and Keys.

   
3. Locate your CrowdStrike region from the Base URL shown in the console:

   
4. Click Create API client then enter a descriptive name and assign the required API scopes.

1. After completing the above, copy your Client ID, Client Secret and Region.

2. In BalkanID, open the CrowdStrike Falcon integration and paste those values into the corresponding fields, then click Next.

1. Click on next to move onto Optional Configuration.

2. Fill Optional configuration, if required.

1. Once you filled in the information, click Save. Your integration is now configured and you will see the status of the integration displayed alongside other integrations on the Integrations page. When data is available, the integration Status column will read Connected and the integration Message will read Data available.

Integration Scopes

Read Only Scopes	Lifecycle Management Scopes
Identity Protection Entities - Read Identity Protection GraphQL - Write	N/A