Mulesoft

About this document

This document provides the step-by-step procedure to configure Mulesoft in SAFE.

Introduction

SAFE integrates with Mulesoft and fetches the security misconfiguration of the Mulesoft account in SAFE.

Prerequisites

• Access required in SAFE:

  • SAFE Admin Access

• Access required in Mulesoft:

  • Mulesoft Admin

• Required User Inputs:

  • API URL

  • Client ID

  • Client Secret

• Required Scope:

  • General

    • View Users in a particular organization

    • View Particular Organization Clients

    • Access Controls Viewer

    • View Organization

    • View Connected Applications

Generate Connection Details

• How to generate API Token

  • Log in to your Mulesoft account as Admin.

  • Click on the Burger Menu icon on the top left corner

    
    Open image-20240322-054229.png

  • Click on Access Management under the ADMIN section

    
    Open image-20240322-054422.pn

  • Click on the Connected Apps

  • Click on the Create app button

    
    Open image-20240322-054528.png

  • Enter the Name

  • Select the Type App acts on its behalf (client credentials)

  • Click on the Add Scopes and select the Scope

    
    Open image-20240404-083150.png

  • Click on the Save button

  • Click on the Copy Id and Copy Secret button and save. These will be used as Client ID and Client Secret while configuring Mulesoft in SAFE

  • It's important to regularly update the Client ID and Client Secret in SAFE according to its expiration date.

    
    Open image-20240322-060236.png

• How to get API URL

  • Log in to your Mulesoft account as Admin. 

  • In the exhibit provided, find the URL highlighted, Copy and save this API URL to use it while configuring Mulesoft in SAFE.

    
    Open image-20240322-061821.png

Configure Mulesoft in SAFE

• Log in to your SAFE account as Admin.

• Click on the Integrations option from the left navigation.

• Scroll to find the Mulesoft integration card or search for Mulesoft in the search bar.

  
  Open image-20240322-051528.png

• Hover over the Mulesoft integration card and click on the Configure button.

• Enter the following:

  • API URL

  • Client ID

  • Client Secret

• Enter the Auto Sync Frequency.

• Click on the Test Connection button.

• Once the connection is successful, click on the Save button.

  
  Open image-20240322-061935.png

• Once the configuration is saved successfully, click on the Sync Now button to trigger an on-demand sync.

  
  Open image-20240322-062341.pn

• Upon a successful sync, the system pulls the Mulesoft assets and their findings in SAFE. You can track the status of the sync in the History table.

View Results

• Go to the integration homepage

• Scroll to find the Mulesoft integration card or search for Mulesoft in the search bar.

• Click on the Mulesoft integration card for Finding View and Asset View.

  • Finding View: This tab displays all the findings details pulled from Mulesoft.

    
    Open image-20240322-062414.png

  • Asset View: This tab displays all the assets pulled from Mulesoft.

    
    Open image-20240322-062445.png

History

Learn More about Integration History here.

SAFE's Outgoing IP Addresses

Click here to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.