Skip to main content
Question

Chronicle API Integration issue

  • March 9, 2026
  • 0 replies
  • 6 views

soargeekexplorer
Forum|alt.badge.img+1

I am using workload identity for Chronicle api integration, I am getting error” unable to acquire impersonated credentials” . I think the issue is in adding the Principal. I am not sure what Principal needs to be added and how I can find it from scratch. I am not getting the principal in the error log also while testing the instance. Please help me with the steps how and which principal I can use and resolve the issue.

Thanks in advance :)