v1

latestOpenAPI 3.0.02026-07-141,4077,1665.2 MB
Security Monitoring

Activate an entity context sync integration

Activate an entity context sync integration for a source type that does not require manually supplied credentials (for example, Entra ID). If an integration of this type already exists, it is returned (re-enabling it first if it was disabled) instead of creating a duplicate.

post/api/v2/security_monitoring/configuration/integration_config/{integration_type}/activate

Path parameters

integration_typestring required
Example:entra_id

The integration type to activate (for example, entra_id).

Request body

Example request

{
  "data": {
    "attributes": {
      "domain": "default",
      "name": "My Entra ID Integration",
      "settings": {
        "setting1": "value1"
      }
    },
    "type": "activate_entra_id_request"
  }
}

Response

OK

Example response

{
  "data": {
    "attributes": {
      "created_at": "2026-05-01T12:00:00Z",
      "domain": "siem-test.com",
      "enabled": true,
      "integration_type": "GOOGLE_WORKSPACE",
      "modified_at": "2026-05-01T12:00:00Z",
      "name": "My GWS Integration",
      "settings": {
        "setting1": "value1"
      },
      "state": "valid"
    },
    "id": "11111111-2222-3333-4444-555555555555",
    "type": "integration_config"
  }
}