Prerequisites
The user performing the integration must have the Project Admin role assigned
A Reco user with Admin Role
Integrate Wiz with Reco
Open the Wiz Portal
Click on the Settings Icon on the upper right side of the screen
Click on "Service Accounts", then click on "+ Add Service Account"
Assign a name to the service account
Under "Type", choose "Custom Integration (GraphQL API)"
Under "API Scopes", scroll down to "Users" and choose:
read:users , read:security_settings, read:service_accounts, admin:identity_providers
Click on "Add Service Account"
Copy the generated Client ID and Client Secret to a safe place, and keep it aside. Click "Finish"
Copy the Wiz Token URL from the UI, and keep it aside:
At the top right corner, click on the user icon, then "User Settings"
Click on "Tenant" on the left-side menu
Copy the "API Endpoint URL" and keep it aside:
Login to the Reco Platform
Click on "Configurations" then click on "Integrations"
Locate the "Wiz" object and click on "Add Integration":
Click on "Allow"
Fill in the following information from the previously copied information:
Wiz Token URL
API Endpoint URL
Client ID
Client Secret
Click on "Reinstall into Workspace"
Click on "Start Extraction"
If the integration was successful, the Wiz Integration status will become "Active"
What do we ingest exactly?
Scope | Meaning |
read:users | Scope for only retrieving users or user aliases |