v1

latestOpenAPI 3.0.02026-07-141,4077,1665.2 MB

Security Monitoring

List entity context sync configurations

List the entity context sync configurations for Cloud SIEM. Each configuration connects Cloud SIEM to an external source that provides entities (for example, users from an identity provider) for use in signals and the entity explorer.

get/api/v2/security_monitoring/configuration/integration_config

Query parameters

filter[integration_type]'GOOGLE_WORKSPACE' | 'OKTA' | 'ENTRA_ID'

The type of external source that provides entities to Cloud SIEM.

Example:GOOGLE_WORKSPACE

Filter the entity context sync configurations by source type.

Response

Example response

{
  "data": [
    {
      "attributes": {
        "created_at": "2026-05-01T12:00:00Z",
        "domain": "siem-test.com",
        "enabled": true,
        "integration_type": "GOOGLE_WORKSPACE",
        "modified_at": "2026-05-01T12:00:00Z",
        "name": "My GWS Integration",
        "settings": {
          "setting1": "value1"
        },
        "state": "valid"
      },
      "id": "11111111-2222-3333-4444-555555555555",
      "type": "integration_config"
    }
  ]
}