SSO - Set HTTP POST Credentials

Question

I feel really dumb for not knowing how to do this, but this is the first time I have been asked to do this when setting up SSO.

I am setting up SSO with Sense AI using Entra. We are the IdP. I have already configured single sign-on (SAML) on my end creating the application, as well as configured directory sync. I am now being asked to configure log streams. We do not have Datadog, Splunk, etc. so the best route is to grab HTTP POST credentials. However, I have no idea how or where to find these.

URL:
HTTP Header Name:
HTTP Header Value:
Request Body Format: JSON or NDJSON

The instructions given to me through their setup portal, WorkOS, are as follows:

The HTTP POST log stream provider is a generic option to stream logs to an HTTPS endpoint.

You'll need to enter the following information in the form below:

The URL which will accept HTTP POST requests.

The HTTP Header Name, which could be the standard HTTP Authorization Header, or a custom header.

The HTTP Header Value, which will be treated as a secret.

The Request Body Format, choosing between Standard JSON and Newline Delimited JSON (NDJSON). The HTTP POST payload will include a batch of events in JSON. Choosing newline delimited JSON allows the payload to be split into individual event objects with a regex so that each event can be processed individually. With standard JSON, the payload will be a JSON array of event objects.

How do I grab or find this information? MS Graph? If so, what I do input? Do I find it in the Entra portal? Any help is appreciated.

Answer 1

To set up the HTTP POST credentials for your SSO configuration with Sense AI using Microsoft Entra, you will need to gather the following information:

1. URL: This should be the endpoint provided by Sense AI that will accept HTTP POST requests. You will need to obtain this from their documentation or support.
2. HTTP Header Name: This could be a standard header such as Authorization if you are using bearer tokens, or it could be a custom header specified by Sense AI.
3. HTTP Header Value: This is typically a secret or token that you will use for authentication. If you are using a bearer token, this will be the token itself. You may need to generate this token through Microsoft Entra or obtain it from your application configuration.
4. Request Body Format: You can choose between Standard JSON or Newline Delimited JSON (NDJSON). The choice depends on how you want the data to be structured when sent to the endpoint. Standard JSON sends a JSON array, while NDJSON allows for individual event processing.

To find the necessary tokens or credentials, you may need to refer to the Microsoft Entra portal where you registered your application. Look for the application settings, specifically under the "Certificates & secrets" section, where you can create and manage client secrets.

If you are using Microsoft Graph for API interactions, ensure that you have the correct permissions set up to access the necessary data.

---

References:

• Microsoft Entra authentication for Application Insights
• Tutorial: Microsoft Entra single sign-on (SSO) set up for Logz.io
• Stream Defender for IoT cloud alerts to a partner SIEM