Skip to main content
Sign in as an Admin of your Twingate network. Admin is the only Twingate role that can make changes under Settings > API, where tokens are generated. The token belongs to that one network.

​
Find your Network name

The Network is the host name of your Twingate Admin Console. It is your network name, then the region when your address has one, then twingate.com.

  • Sign in to the Admin Console and copy the address from the browser address bar. Delete https:// and everything after twingate.com.
  • Format: {network}.{region}.twingate.com or {network}.twingate.com
  • Example: acme.us1.twingate.com
  • Example without a region: acme.twingate.com
  • Keep the region, such as us1, when your address shows one. Twingate recommends the regional host to avoid redirects.
  • If your address has no region, you can also enter the name on its own, such as acme.
  • Paste it into the Network field in StackOne Hub.

​
Create the API token

A Twingate API token belongs to one network and can do only what its permission level allows.

1

Sign in to Twingate

Sign in to your Twingate Admin Console at https://{network}.twingate.com as an Admin.

  • Navigate to Settings > API.
2

Generate the token

Click Generate Token.

  • Label: StackOne Integration
  • Permission Level: Read only
  • Read only gives read access to everything the API exposes, which covers every action in this connector. Read & Write adds creating, updating and deleting, and Read, Write & Provision adds generating Connector tokens and creating Service Keys. StackOne does not need either.
  • Allowed Ranges is optional and defaults to 0.0.0.0/0, ::/0, which allows any address. To limit the token to StackOne, replace the default with StackOne’s IP addresses, separated by commas. A token takes up to 10 entries, and a request from any other address fails authentication. StackOne may change these addresses, so check that list if the connection starts failing.
  • Click Generate.
3

Copy the token

Copy the token from the window that opens and store it securely for use later.

  • The token is shown once. Twingate says you will not be able to retrieve it from the Twingate interface once you close the window.
  • Paste it into the API Key field in StackOne Hub.

​
Keep the connection working

Read only is Twingate’s lowest permission level, so there is no smaller grant to choose.

  • If StackOne is refused with an access error, check that the token is enabled and that its Allowed Ranges include StackOne’s IP addresses.
  • Twingate documents no expiry for API tokens, so the connection keeps working until you disable the token or change its allowed ranges.

​
Disable or replace the token

To stop StackOne from reading your network, disable the token. You can enable it again later.

  • Navigate to Settings > API.
  • Open the menu at the end of the token’s row and disable it.
  • To replace the token, generate a new one with the same settings, paste it into the API Key field in StackOne Hub, then disable the old one.

​
Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • Network
  • API Key
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account on your Accounts page.