The Cloud Identity Engine (CIE) is a cloud-based application that must be activated before it can be configured and used within the Cortex XSIAM environment. This activation is performed in the Palo Alto Networks Hub, which is the central management console for all Palo Alto Networks cloud-delivered security services. From the Hub, an administrator launches the Cloud Identity Engine application to begin the setup and configuration process. This initial activation step is a prerequisite to configuring any data sources or identity providers.

A. Enable SSO integration: This configures user authentication for accessing the XSIAM platform itself, which is a separate process from activating the CIE service.

B. Activate it in the Customer Support Portal: The Customer Support Portal (CSP) is used for managing product licenses and support cases, not for the operational activation of cloud applications.

D. Enable Active Directory log collection: This is a data source configuration step that is performed after the Cloud Identity Engine has already been activated and launched from the Hub.

1. Palo Alto Networks (2024). "Cloud Identity Engine Administrator's Guide". Palo Alto Networks TechDocs. In the section "Get Started with the Cloud Identity Engine," the first step listed is "Activate the Cloud Identity Engine," which states: "Log in to the hub and select Cloud Identity Engine to activate the app." This confirms the Hub is the location for activation.

2. Palo Alto Networks (2024). "Cortex XSIAM Administrator's Guide". Palo Alto Networks TechDocs. The section "Get Started with Cortex XSIAM" describes the Palo Alto Networks Hub as the single-pane-of-glass from which you access and manage all your Cortex applications, reinforcing its role as the central point for application activation and management.