>
    Strata Copilot
    Create a Scanafi Built-in Account
    Focus
    Focus
    1. Home
    2. Next‑Gen Trust Security
    3. Next-Gen Trust Security
    4. Next-Gen Trust Security Overview
    5. Built-in Accounts Overview
    6. Create a Scanafi Built-in Account
    Next‑Gen Trust Security

    Create a Scanafi Built-in Account

    Table of Contents

    Create a Scanafi Built-in Account

    Scanafi built-in accounts use a private key and Client ID for authentication.
    For more information about downloading and installing the Scanafi utility, refer to Downloading and Installing Scanafi.

    Before You Begin

    Before creating a Scanafi built-in account, you must complete the following tasks:
    By completing these prerequisites, you ensure that your built-in accounts are configured correctly and ready to handle authentication requests using modern security protocols.

    To Create a Scanafi Built-in Account

    1. Sign in to Next-Gen Trust Security.
    2. Click System Settings > Built-in Accounts.
    3. Click New.
    4. Choose the desired use case from the Use case list, and click Continue. The use cases available for you to choose depend on which Next-Gen Trust Security components you have licenses for.
    5. Enter a Name for your new built-in account.
    6. (Conditional) Enter the number of days for which you want the account to remain valid in the Validity (days) field. You can select any number from 1 to 365 days. This step doesn't apply when creating a Custom API Integration built-in account.
    7. Select a Key pair authentication method.
      Note:
      • Selecting Key pair - Auto-generate a keypair and download the private key requires you to copy the public and private key values used for authentication.
      • Selecting Key pair - Generate your own keypair and upload the public key requires you to provide your own the public key in PEM format for authentication.
    8. Select the desired Scope, making sure it matches the permissions and access requirements of your built-in account, and then click Continue. Learn more
    9. (Conditional) After selecting a key pair authentication method and scope options, click Create or Continue.
    10. (Conditional) If you previously selected Key pair - Auto-generate a keypair and download the private key, copy the public and private key values used for authentication.
    11. (Conditional) If you previously selected Key pair - Generate your own keypair and upload the public key enter your public key in PEM format for authentication.
    12. After entering all the details, review the information to ensure it's correct and then click Finish to create the new built-in account.

    © 2026 Palo Alto Networks, Inc. All rights reserved.