01-20-2025 08:00 PM
Hello, I am trying to interact with the umbrella API and i need to generate an api key and secret. The issue is the link (https://dashboard.umbrella.com) isn't available. I also spun up a devnetsandbox from Cisco and was provided a username and credentials but when I try to use it, I get an error message saying that I need to be added into the tenant.
I don't have Umbrella Investigate deployed at all. I simply want to interact with the API so I can create an application. I am following this doc https://developer.cisco.com/docs/cloud-security/authentication-%e2%80%94-umbrella-api-keys/#prerequisites
Message: AADSTS50020: User account 'ABCDEF@gmail.com' from identity provider 'live.com' does not exist in tenant 'Cisco Devnet Sandboxes' and cannot access the application 'https://login.umbrella.com/sso'(Cisco Umbrella Admin SSO) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account.
01-20-2025 11:39 PM
Sandbox uses its own Azure AD Authentication to login to the Umbrella account. On your reservation page, goto the Quick Access tab and the login details are there. See attached. You need to Launch the lab first and it 1-2 mins to reach Active state.
We use our own "devnetsandbox.onmicrosoft.com" domain for user logins. These are created on lab startup and destroyed on teardown.
01-21-2025 04:55 PM
I've done everything you said. Quick Access > Copy and paste credentials. Then it asks me to login using a microsoft account. Then takes me to the same error page I provided above. Prior to logging in, I confirmed that the sandbox was active. Unable to log in.
I do want to point out the I am not part of any organization. I simply just want to create the sandbox so that I can generate an api key so I can use it to interact with the Umbrella reporting API
01-21-2025 12:34 AM
Hi,
We will check the sandbox this morning and ensure all of our accounts are working correctly.
We will come back to you
Support
01-21-2025 06:41 AM
Hi,
You need to login using the AD SSO credentials provided in the Quick Access tab.
Spin up a new Umbrella sandbox. When it becomes actives, your credentials will be there.
Support
01-22-2025 03:27 AM
I tested the login reserving the "Cisco Umbrella Secure Internet Gateway" sandbox. I was able to enter dashboard.umbrella.com with the credentials provided by the sandbox quick access.
Try to access https://login.umbrella.com/sso using an incognito window and with the credentials provided when you reserve the sandbox. Take screenshots of the the SSO auth and error, that would be helpful. I have the impression when you signed using SSO, an incorrect mail was used. Incognito mode will help to discard this.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide