SecurityScorecard Issues (via Codeless Connector Framework)
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | SecurityScorecardIssueCCPDefinition |
| Publisher | SecurityScorecard |
| Used in Solutions | SecurityScorecard Cybersecurity Ratings |
| Collection Method | CCF |
| Connector Definition Files | SecurityScorecardIssue_DataConnectorDefinition.json |
| DCR Definition Files | SecurityScorecardIssue_DCR.json |
| CCF Configuration | SecurityScorecardIssue_PollingConfig.json |
| CCF Capabilities | APIKey, Nested |
The SecurityScorecard Issues (via Codeless Connector Framework) connector ingests issue history events from the companies in a SecurityScorecard portfolio into Microsoft Sentinel. Add one connection per portfolio you want to monitor — each connection is managed independently in the grid below. Replaces the Function App connector.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
SecurityScorecardIssuesHistory_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
Custom Permissions:
- SecurityScorecard API token: A SecurityScorecard API token is required. See SecurityScorecard docs for how to provision a bot user token.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. STEP 1 - Create a SecurityScorecard API token
As an administrator in SecurityScorecard, navigate to My Settings then Users, create a bot user with Read Only permission, and generate the API token.
2. STEP 2 - Add a portfolio connection
Add one connection per SecurityScorecard portfolio. Each connection ingests the issue-history events for the companies in a single portfolio and is listed, managed, and deleted independently below. To also ingest your own company's issue events (My Scorecard), enter your company domain in the optional field on one connection. Connector Management Interface
This section is an interactive interface in the Microsoft Sentinel portal that allows you to manage your data collectors.
📊 View Existing Collectors: A management table displays all currently configured data collectors with the following information:
- Portfolio Name
- Portfolio ID
➕ Add New Collector: Click the "Add new collector" button to configure a new data collector (see configuration form below).
🔧 Manage Collectors: Use the actions menu to delete or modify existing collectors.
💡 Portal-Only Feature: This configuration interface is only available when viewing the connector in the Microsoft Sentinel portal. You cannot configure data collectors through this static documentation.
Add a SecurityScorecard portfolio
Connect one SecurityScorecard portfolio
When you click the "Add portfolio" button in the portal, a configuration form will open. You'll need to provide:
- Base URL (required): https://api.securityscorecard.io
- API Token (required): Enter your SecurityScorecard API token
- Portfolio ID (required): Enter the SecurityScorecard portfolio ID
- Portfolio Name (required): A friendly name for this portfolio (shown in reports and the workbook)
- Your Company Domain (optional - My Scorecard) (optional): e.g. yourcompany.com - leave blank if not needed
💡 Portal-Only Feature: This configuration form is only available in the Microsoft Sentinel portal.
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊