Connect SentinelOne to Anzenna

This guide walks you through creating a service user in the SentinelOne Management Console and connecting it to Anzenna for endpoint security monitoring, threat detection, and device visibility.

Prerequisites

• SentinelOne Management Console administrator access
• Access to the Anzenna platform

Step-by-Step Instructions

Part 1: Create a Service User in SentinelOne

1. Navigate to your SentinelOne Management Console and click on Service Users.

2. Click on Actions.

3. Click on Create New Service User.

4. Type Anzenna as the service user name.

Part 2: Set Token Expiration

1. Click on the Expiration Date dropdown.

2. Click on Custom.

3. Pick a date, ideally 2 years out. Choosing a shorter time period will result in needing to rotate the API key sooner.

4. Pick a year.

5. Pick a specific date.

6. Click Apply to confirm the date selection.

Part 3: Configure Scope and Create User

1. Click Next to proceed to the scope configuration.

2. Click on Select Scope of Access.

3. Select the appropriate scope of access for your organization.

4. Click Create User to finalize the service user.

Part 4: Copy the API Token and Complete Setup

1. Click Copy API Token to copy the generated token.

warning

The API token is only shown once. Copy it immediately and store it securely — if lost, you will need to regenerate a new token.

2. Click Close to exit the dialog.

3. In Anzenna, navigate to Settings > Integrations, find the SentinelOne card, paste the API token, enter your SentinelOne console URL, and click Save.

success

Your SentinelOne integration is now active. Anzenna will begin collecting endpoint data for security monitoring and threat visibility.