Sonrai Security

Sonrai Security offers a cloud security platform focused on identity and data governance. It helps organizations monitor, secure, and manage access to cloud environments by identifying potential vulnerabilities, reducing risks, and ensuring compliance. Its solutions span across cloud infrastructure, DevOps pipelines, and compliance automation.

For detailed information, refer to Sonrai’s official documentation.

Integration Method: API
Tables: Ticket Inventory (99405001)

This integration supports the following events.

Note:

Sonrai Security is a continuously updated cloud service. As of this document's preparation, the latest release was on February 6, 2025. Additionally, this integration leverages the Sonrai Security GraphQL API, which does not include an explicit version identifier.

Prerequisites

• The user should have access to the Sonrai Security portal.

• The user should have access to the DataBee console.

Configuration Overview

1. Create Authentication token and retrieve organization ID.

   1. Create Authentication Token

   2. Retrieve organization ID

2. Create Sonrai Security data feed in the DataBee console with the required Client credentials

Sonrai Security Configuration

Create Authentication Token

1. Login to the Sonrai security console.

2. Scroll through the left navigation bar and click the Search button.

   

3. Click on Advanced button.

   

4. Paste the below GraphQL query in text area.

   mutation createToken {
   
   GenerateSonraiUserToken(input: { expiresIn: 2592000, name: "sampletoken" }) {
   
   name
   
   expireAt
   
   token
   
   }
   
   }

   

5. Click the Execute query button to generate an authentication token with a 30-day expiry.

   

6. Copy the token, as it will be required during the DataBee configuration process.
    

   Note:

   The user must regenerate the token upon expiration. The expiration time is indicated in the expireAt property.

Retrieve Organization ID

1. To obtain the organization ID, click on the profile icon.

   

2. Copy Organization ID, as it will be required during the DataBee configuration process.
    

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for Sonrai Security and select it.
    

3. Click on the API Ingest.
    

4. Enter feed contact information and click Next.
    

5. In the configuration page, enter the following:

   • API Base URL: replace <instance> placeholder with the organization id.

   • Authorization Method: Bearer Token

   • Token: paste the Token generated earlier in the Sonrai Security portal.

   • Event Types: preselected for all the event types that integration pulls.

   

6. Click Submit.

Troubleshooting Tips

• If you encounter an Unauthorized error, it may indicate that the authentication token has expired. In this case, regenerate the token to restore access. To prevent potential issues, consider pasting the token into a text editor to verify that there are no extra spaces or unexpected characters before reconfiguring the DataBee feed.