Clariti Docs
Credentials3 minutes· easy

SentinelOne

Endpoint Protection

The SentinelOne adapter pulls agent inventory, threat detections, application inventory, activity logs, and user data into Clariti for centralized endpoint detection and response visibility.

What Clariti Collects

What You'll Need

  • Admin or IT access to the SentinelOne management console
  • A SentinelOne subscription with API access enabled
  • ~3 minutes to complete setup
  • Your Clariti account with adapter management permissions

Get Your Credentials

Log in to the SentinelOne management console. Click on your username in the top-right corner and go to My User (or navigate to Settings > Users and select your user).

Scroll to the API Token section and click Generate. Copy the token immediately — it is only shown once. If you need to regenerate it later, any previous token is revoked.

For least-privilege access, create a dedicated service account with the Viewer role, which provides read-only access to all data Clariti needs.

Enter Credentials in Clariti

Value from vendor consolePaste into Clariti field
API TokenAPI Key
Management console URLHost

Verify Connection

Click Test Connection in Clariti. A successful connection returns a green checkmark. The first data sync typically completes within a few minutes.

Troubleshooting

  • 401 Unauthorized — The API token may have been regenerated, which revokes the previous one. Generate a new token and update it in Clariti.
  • 403 Forbidden — Ensure the user account has at least Viewer-level permissions. Site-level tokens only see that site's data — use an account-level token for full visibility.
  • Timeout — Large SentinelOne deployments with many agents may take longer for initial sync. Clariti retries automatically.