Prisma Cloud instance integration with Cortex XDR/XSIAM failing with error "Invalid Credential"
201
Created On 09/18/25 23:54 PM - Last Modified 09/11/26 18:24 PM
Symptom
- Prisma Cloud collector integration is failing in Cortex XDR with the following error:
PRISMA_CLOUD: Invalid credentials
Environment
- Cortex XDR
- Cortex XSIAM
- Cortex Cloud
Cause
Trusted login IP addresses were enabled in the Prisma Cloud tenant. Cortex XDR IPs need to be allowed for API access.
If the Trusted Login IP Address option is enabled, then any untrusted IP address is denied access to both the management console and API.
This can be confirmed on the Prisma Cloud instance. Additionally, the audit logs in the Prisma cloud instance indicate that access is being denied for Cortex IP addresses.
Resolution
- Disable 'Trusted Login IP Address' setting,
or - Add the Cortex XDR IP addresses found here for specific region to the trusted list in the customer's Prisma Cloud tenant.
Additional Information
For additional information view our documentation here.