topic Can't log into Dashboard https://dashboard.umbrella.com to create API in Application Security

Can't log into Dashboard https://dashboard.umbrella.com to create API

kevthedev — Tue, 21 Jan 2025 04:00:23 GMT

Hello, I am trying to interact with the umbrella API and i need to generate an api key and secret. The issue is the link (https://dashboard.umbrella.com) isn't available. I also spun up a devnetsandbox from Cisco and was provided a username and credentials but when I try to use it, I get an error message saying that I need to be added into the tenant.

I don't have Umbrella Investigate deployed at all. I simply want to interact with the API so I can create an application. I am following this doc https://developer.cisco.com/docs/cloud-security/authentication-%e2%80%94-umbrella-api-keys/#prerequisites

Message: AADSTS50020: User account 'ABCDEF@gmail.com' from identity provider 'live.com' does not exist in tenant 'Cisco Devnet Sandboxes' and cannot access the application 'https://login.umbrella.com/sso'(Cisco Umbrella Admin SSO) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.

Re: Can't log into Dashboard https://dashboard.umbrella.com to create

bigevilbeard — Tue, 21 Jan 2025 07:39:27 GMT

Sandbox uses its own Azure AD Authentication to login to the Umbrella account. On your reservation page, goto the Quick Access tab and the login details are there. See attached. You need to Launch the lab first and it 1-2 mins to reach Active state.
We use our own "devnetsandbox.onmicrosoft.com" domain for user logins. These are created on lab startup and destroyed on teardown.

Re: Can't log into Dashboard https://dashboard.umbrella.com to create

jokearns1 — Tue, 21 Jan 2025 08:34:22 GMT

Hi,

We will check the sandbox this morning and ensure all of our accounts are working correctly.

We will come back to you

Support

Re: Can't log into Dashboard https://dashboard.umbrella.com to create

jokearns1 — Tue, 21 Jan 2025 14:41:22 GMT

Hi,

You need to login using the AD SSO credentials provided in the Quick Access tab.

Spin up a new Umbrella sandbox. When it becomes actives, your credentials will be there.

Support

Re: Can't log into Dashboard https://dashboard.umbrella.com to create

kevthedev — Wed, 22 Jan 2025 00:55:35 GMT

I've done everything you said. Quick Access > Copy and paste credentials. Then it asks me to login using a microsoft account. Then takes me to the same error page I provided above. Prior to logging in, I confirmed that the sandbox was active. Unable to log in.

I do want to point out the I am not part of any organization. I simply just want to create the sandbox so that I can generate an api key so I can use it to interact with the Umbrella reporting API

Re: Can't log into Dashboard https://dashboard.umbrella.com to create

Jesus Illescas — Wed, 22 Jan 2025 11:27:54 GMT

I tested the login reserving the "Cisco Umbrella Secure Internet Gateway" sandbox. I was able to enter dashboard.umbrella.com with the credentials provided by the sandbox quick access.

Try to access https://login.umbrella.com/sso using an incognito window and with the credentials provided when you reserve the sandbox. Take screenshots of the the SSO auth and error, that would be helpful. I have the impression when you signed using SSO, an incorrect mail was used. Incognito mode will help to discard this.