Clariti Docs
Credentials5 minutes· easy

Sophos Central

Endpoint Protection

The Sophos Central adapter connects to Sophos Central to pull endpoint protection status, managed device inventory, and threat event data into Clariti for unified endpoint security visibility.

What Clariti Collects

What You'll Need

  • Super Admin or Admin access to Sophos Central
  • An active Sophos Central subscription
  • ~5 minutes to complete setup
  • Your Clariti account with adapter management permissions

Get Your Credentials

Log in to Sophos Central at central.sophos.com. Navigate to Global Settings > API Credentials Management and click Add Credential.

Give the credential a name such as "Clariti Integration" and select the Service Principal ReadOnly role for least-privilege access. After creation, the console displays a Client ID and Client Secret. Copy both values immediately — the secret is only shown once.

You also need your Tenant ID, which can be found via the Sophos whoami API endpoint after authenticating, or from the Sophos Partner/Central dashboard URL.

Enter Credentials in Clariti

Value from vendor consolePaste into Clariti field
Tenant IDTenant / Directory ID
Client IDClient ID
Client SecretClient Secret

Verify Connection

Click Test Connection in Clariti. A successful connection returns a green checkmark. The first data sync typically completes within a few minutes.

Troubleshooting

  • 401 Unauthorized — Verify the Client ID and Client Secret are correct. Regenerate the credential in Sophos Central if needed.
  • 403 Forbidden — Ensure the API credential has at least the Service Principal ReadOnly role assigned.
  • Timeout — Sophos Central API may throttle during peak usage. Clariti retries automatically.