# Configuring the CrowdStrike SaaS Connector

To connect CrowdStrike to Agentic Fabric, you'll create an API client for CrowdStrike. This will allow Agentic Fabric to discover CrowdStrike EDR process and MCP config agents and aggregate them as non-human identities.

!!! important

If your organization has already configured a CrowdStrike SaaS source, you can use the existing source for agent discovery. The fields will be prepopulated with the source's information. You can edit these fields to configure a new integration.

## Creating an API Client in CrowdStrike

To create an API client in the CrowdStrike Falcon Console, you must log in as a CrowdStrike administrator.

1. Follow the CrowdStrike [product documentation](https://falcon.us-2.crowdstrike.com/api-clients-and-keys/clients) to create an API client in CrowdStrike.
2. Assign the API client the scopes defined in [Required Permissions](https://documentation.sailpoint.com/connectors/saas/crowdstrike/help/saas_connectivity/crowdstrike/required_permissions.html).
3. Copy and store the client ID and secret. You'll provide these values to connect CrowdStrike to Agentic Fabric.

## Connecting CrowdStrike to Agentic Fabric

1. Go to the **Connect Source** step of the Agentic Fabric onboarding experience.
2. Select **CrowdStrike** from the left pane.
3. In the **CrowdStrike** section, complete the following:

- In the **Source Name** field, enter a unique name for the source.

- In the **Source Owner** field, select the identity who will own the source.

- In the **Description** field, enter a unique description for the source to distinguish it from similar connections.

4. In the **Configure Authentication** section, complete the following:

- In the **Base URL** field, enter the base URL of your organization's instance of CrowdStrike. To find your base URL, refer to your CrowdStrike Cloud Environment URL (`https://api.us-2.crowdstrike.com` or `https://api.eu-1.crowdstrike.com`).
    - In the **Client ID** field, enter the client ID from the API client you created.
    - In the **Client Secret** field, enter the client secret from the API client you created.

5. Select **Test Connection** to ensure the connection is successful.

6. If the test is successful, select **Aggregate** to run an aggregation for the source. Select **Exit** to skip this step. For information about datasets specific to CrowdStrike, refer to the CrowdStrike [connector documentation](https://documentation.sailpoint.com/connectors/saas/crowdstrike/help/saas_connectivity/crowdstrike/datasets.html).

A **Completed** status is now displayed next to the source in the left panel.

7. Choose another connector to configure or select **Continue** to proceed to the next onboarding step.

Configuring the CrowdStrike SaaS Connector

To connect CrowdStrike to Agentic Fabric, you'll create an API client for CrowdStrike. This will allow Agentic Fabric to discover CrowdStrike EDR process and MCP config agents and aggregate them as non-human identities.

Important

If your organization has already configured a CrowdStrike SaaS source, you can use the existing source for agent discovery. The fields will be prepopulated with the source's information. You can edit these fields to configure a new integration.

Creating an API Client in CrowdStrike

To create an API client in the CrowdStrike Falcon Console, you must log in as a CrowdStrike administrator.

Follow the CrowdStrike product documentation to create an API client in CrowdStrike.
Assign the API client the scopes defined in Required Permissions.
Copy and store the client ID and secret. You'll provide these values to connect CrowdStrike to Agentic Fabric.

Connecting CrowdStrike to Agentic Fabric

Go to the Connect Source step of the Agentic Fabric onboarding experience.
Select CrowdStrike from the left pane.
In the CrowdStrike section, complete the following:
- In the Source Name field, enter a unique name for the source.
- In the Source Owner field, select the identity who will own the source.
- In the Description field, enter a unique description for the source to distinguish it from similar connections.
In the Configure Authentication section, complete the following:
- In the Base URL field, enter the base URL of your organization's instance of CrowdStrike. To find your base URL, refer to your CrowdStrike Cloud Environment URL (https://api.us-2.crowdstrike.com or https://api.eu-1.crowdstrike.com).
- In the Client ID field, enter the client ID from the API client you created.
- In the Client Secret field, enter the client secret from the API client you created.
Select Test Connection to ensure the connection is successful.
If the test is successful, select Aggregate to run an aggregation for the source. Select Exit to skip this step. For information about datasets specific to CrowdStrike, refer to the CrowdStrike connector documentation.

A Completed status is now displayed next to the source in the left panel.
Choose another connector to configure or select Continue to proceed to the next onboarding step.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.