> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stackone.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect Lacework FortiCNAPP with API Access Key – StackOne Hub

> Link a Lacework FortiCNAPP account in the StackOne Hub using API Access Key. End-user guide to authorize the integration and start using Lacework FortiCNAPP actions.

<Warning>To create an API key you must have the account admin role, or otherwise have write permissions for API keys, in the Lacework FortiCNAPP Console. The key inherits the creator's access, so use an account that can reach the data you want to sync — a key with insufficient privileges can still connect but will return empty results or permission errors.</Warning>

<section data-guide-section data-guide-scopes="">
  <h2>Find your account subdomain</h2>

  <p>Your account subdomain is the unique identifier in your Lacework FortiCNAPP URL and determines the API host.</p>

  <ul>
    <li>Check your browser address bar when signed in to the Lacework FortiCNAPP Console.</li>
    <li>Example: if your URL is `https://acme.lacework.net`, your account subdomain is `acme`.</li>
    <li>Enter only the subdomain — no `https://`, no `.lacework.net`, and no trailing slash.</li>
    <li>It is also available as the `account` value in the downloaded API key file (e.g. `acme.lacework.net`).</li>
  </ul>
</section>

<section data-guide-section data-guide-scopes="">
  <h2>Create an API access key</h2>

  <p>Create an API access key in the Lacework FortiCNAPP Console, then download the key file — it contains the Key ID and Secret used to connect.</p>

  <Steps>
    <Step title="Sign in to Lacework FortiCNAPP">
      <div data-guide-step data-guide-scopes="" data-guide-display-scopes-list="">
        <p>Sign in to your Lacework FortiCNAPP account (e.g., `https://<your-subdomain>.lacework.net`) with administrator privileges.</p>

        <ul>
          <li>Navigate to <strong>Settings</strong> > <strong>Configuration</strong> > <strong>API keys</strong>.</li>
        </ul>
      </div>
    </Step>

    <Step title="Create the key and download the file">
      <div data-guide-step data-guide-scopes="" data-guide-display-scopes-list="">
        <p>Create a new API key in the API keys page, then download and store the key file securely. Each user can have up to 20 API keys.</p>

        <ul>
          <li>Create a new API key.</li>
          <li>Download the key file after creating the key, and store it securely.</li>
          <li>API Key ID: the `keyId` value from the downloaded key file.</li>
          <li>API Secret: the `secret` value from the downloaded key file.</li>
        </ul>
      </div>
    </Step>
  </Steps>
</section>

<div data-whitelabel-hide>
  <h2>Linking the Account from the Hub</h2>

  <Steps>
    <Step title="Navigate to the Hub">
      Use one of the three <a href="/guides/accounts-section#linking-accounts">Linking Account Methods</a> to access the Hub.
    </Step>

    <Step title="Fill out the fields">
      Fill out the following fields using details from your provider:

      <ul>
        <li><strong>Account Subdomain</strong></li>
        <li><strong>API Key ID</strong></li>
        <li><strong>API Secret</strong></li>
      </ul>
    </Step>

    <Step title="Connect">
      <ul>
        <li>Click <strong>Connect</strong></li>
        <li>If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider's authorization flow.</li>
        <li>Once authorization is successful, you will see a confirmation popup</li>
      </ul>
    </Step>
  </Steps>

  <p>If the account linking is successful, you will see the newly linked account in your <a href="/guides/accounts-section">Accounts</a> page.</p>
</div>