CrowdStrike

SailPoint Entro integrates with CrowdStrike to enrich devices data (endpoints), discover Endpoint AI Agents, and identify Non‑Human Identities (NHIs) linked to Active Directory or unmanaged endpoints.

---

Integration Scope

• Device enrichment and NHI mapping

• Inventorying of used MCPs, AI Agents

• Active Directory Users (NHIs) management

• Real‑time response and incident data ingestion

Navigation Path

Management > Accounts & Integrations > Add New Account > CrowdStrike

Authentication

• Integration uses an API Client ID and Secret generated from the CrowdStrike management console.

---

Architecture

SailPoint Entro Security Cloud
   ↕ (HTTPS/TLS 1.2+)
CrowdStrike Falcon Platform (API)

Security & Compliance

• All API tokens are AES‑256 encrypted.

• TLS 1.2+ enforced for all communications.

• SailPoint Entro operates in a read‑only, non‑intrusive mode.