Skip to main content

Sailpoint IdentityIQ

Visualize Sailpoint IdentityIQ accounts, users, applications, and monitor changes through queries and alerts.

Installation​

info

You will need your SailPoint IdentityIQ instance hostname, and a service account username and password with read access to the SCIM v2 API to set up this integration.

Configuration in SailPoint IdentityIQ​

Before configuring this integration in JupiterOne, you need to create API credentials in SailPoint IdentityIQ:

Required in SailPoint IdentityIQ:

  • Your SailPoint IdentityIQ instance hostname
  • A service account username and password for API access
  • The service account must have read access to the SCIM v2 API endpoints

Authentication: This integration uses HTTP Basic authentication to connect to the SailPoint IdentityIQ SCIM v2 API.

API Endpoints Used: The integration accesses the following SCIM v2 endpoints:

  • /identity/scim/v2/Users - to retrieve user data
  • /identity/scim/v2/Accounts - to retrieve account data
  • /identity/scim/v2/Applications - to retrieve application data

Permissions: The service account needs read-only access to users, accounts, and applications through the SCIM API. We recommend creating a dedicated service account for JupiterOne rather than using an administrator's personal credentials.

Configuration in JupiterOne​

To install the Sailpoint IdentityIQ integration in JupiterOne, navigate to the Integrations tab in JupiterOne and select Sailpoint IdentityIQ. Click New Instance to begin configuring your integration, providing the following:

  • Account Name used to identify the Sailpoint IdentityIQ account in JupiterOne. Ingested entities will have this value stored in tag.AccountName when the AccountName option is enabled.

  • Description to assist in identifying the integration instance, if desired.

  • Polling Interval that you feel is sufficient for your monitoring needs. You may leave this as DISABLED and manually execute the integration.

  • Hostname of your Sailpoint IdentityIQ organization.

  • Username used to authenticate with Sailpoint IdentityIQ.

  • Password associated with the username.

Click Create once all values are provided to finalize the integration.

Next steps​

Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.