Secure Agentless Access (SAA) Configuration
Configuration API for Secure Agentless Access (SAA).
© 2026 Palo Alto Networks, Inc
Authentication
- HTTP: Bearer Auth
Secure Agentless Access (SAA) APIs authenticate client requests using the OAuth 2.0 Client Credentials flow. Please use the client_id, client_secret values associated with an IAM service account along with a scope value of tsg_id:XXXXXXXXXX, where XXXXXXXXXX is the Tenant Service Group (TSG) ID. The resulting JWT access token should be attached to all API calls as a Bearer token in the Authorization header (ex. Authorization: Bearer tokenstring). See the Prisma SASE API authentication guide for how to create a service account and acquire a token.
Security Scheme Type: | http |
|---|---|
HTTP Authorization Scheme: | bearer |
Bearer format: | JWT |
Contact Palo Alto Networks Technical Support: support@paloaltonetworks.com
Terms of Servicehttps://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/legal/palo-alto-networks-end-user-license-agreement-eula.pdf
License MIT