Mend SCA Integration

This guide explains how to obtain a User Key from Mend SCA platform for Invicti ASPM integration. The User Key serves as an authentication credential required to establish the connection between Invicti ASPM and Mend SCA.

Prerequisites:

Active Mend SCA account with appropriate permissions

Access to White Source Software Website.

❗️

Admin or Manager role recommended.

Obtaining User Key:

To obtain a User Key, you need to access the Mend SCA platform and navigate through your user profile settings. Follow these steps:

1. Login to Mend SCA platform at White Source Software Website.
2. Click on your user profile icon in the top right corner of the screen
3. Select My Profile from the dropdown menu

Once you're on the Profile page, you'll see several tabs in the left sidebar. The User Keys section is where you can manage all your API authentication keys.

1. Locate the left sidebar menu on the Profile page
2. Find and click on the User Keys tab
3. The User Keys page will display all your existing keys and creation options

Creating a new User Key is straightforward. Each key can be labeled with a description to help you identify its purpose.

1. On the User Keys page, click the "Create User Key" button located in the top right corner
2. Enter a meaningful description for the key (e.g., 'Invicti ASPM Integration' )
3. Click confirm to generate the key
4. Copy and securely store the generated User Key immediately

❗️

The User Key will be displayed only once. If you lose it, you must create a new key and update all integrations. Store it in a secure password manager or key vault immediately.

Using the User Key in Invicti ASPM

After generating your User Key, you can configure the Mend SCA integration in Kondukto using the following parameters:

Configuration Steps in Invicti ASPM:

1. Navigate to the Integrations page in Invicti ASPM
2. Select Mend SCA from the available integrations
3. Enter the required parameters from the table above
4. Click "Test Connection" to verify the credentials
5. Save the integration once the test is successful