Sophos is a British cybersecurity company offering integrated security software and managed services that protect endpoints, networks, cloud environments, and identities from advanced threats.
Permissions for Sophos Integration
Read endpointsRead eventsRead directory users
How to Connect Scytale and Sophos
1. In Scytale, go to 'Integrations'.
2. Search for Render and select 'Connect'.
3. Paste your Client ID, Client Secret, Tenant ID and API Host URL.
4. Add a connection name - this will be used to differentiate between your connections - and then select 'Connect'.
You have now successfully connected to Sophos!
How To Create Credentials in Sophos
1. How To Generate Credentials
Requires Super Admin role to manage API credentials.
Log in to Sophos Central Admin at https://central.sophos.com.
Click the General Settings icon.
Select API Credentials Management under Administration.
Click Add Credential.
Provide a name and description (e.g., “Scytale Read-Only Access”).
Select role: Service Principal Read-Only.
Click Add to generate credentials.
Copy both the Client ID and Client Secret (Client Secret is shown only once).
Store securely - these are the credentials provided during installation.
2. How To Create API key In Sophos
User Log in to Sophos Central
User looks up their Tenant ID from Sophos Central:
Click the profile icon in the top right corner.
Then, click Support Settings.
Tenant ID will be displayed next to the bottom of the Support settings page.
Then, click the Copy button.
User looks up their API Host from the Sophos regional API table:
On the same Support Settings page, region will be displayed at the bottom: “This account is located in the <Region> region”.
Refer to the table located at Sophos documentation and save the API Host that matches your region.
