DAdatadog
Security Monitoring

List entity context sync configurations

List the entity context sync configurations for Cloud SIEM. Each configuration connects Cloud SIEM to an external source that provides entities (for example, users from an identity provider) for use in signals and the entity explorer.

get/api/v2/security_monitoring/configuration/integration_config

Request

  • Base URL
    https://api.datadoghq.com
  • URL
    https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_config
  • Auth
    • API key in header DD-API-KEY and API key in header DD-APPLICATION-KEY
    • or OAuth 2
      Authorization code: /oauth2/v1/authorize
      Token URL: /oauth2/v1/token scopes: integrations_read

Query parameters

filter[integration_type]'GOOGLE_WORKSPACE' | 'OKTA' | 'ENTRA_ID'

The type of external source that provides entities to Cloud SIEM.

Example:GOOGLE_WORKSPACE

Filter the entity context sync configurations by source type.

Response

OK

Example response

{
  "data": [
    {
      "attributes": {
        "created_at": "2026-05-01T12:00:00Z",
        "domain": "siem-test.com",
        "enabled": true,
        "integration_type": "GOOGLE_WORKSPACE",
        "modified_at": "2026-05-01T12:00:00Z",
        "name": "My GWS Integration",
        "settings": {
          "setting1": "value1"
        },
        "state": "valid"
      },
      "id": "11111111-2222-3333-4444-555555555555",
      "type": "integration_config"
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.