Skip to main content
View as MarkdownOpen in ChatGPTOpen in Claude

SailPoint Connector Integration

Integrate SailPoint as a connector in Axiad Mesh to retrieve user, application access, credential, and entitlement data. This gives Mesh broad visibility into the non-identity-centric applications that SailPoint provisions identities to or draws identity information from.

Setting up the integration has two parts: configure a new API client in SailPoint, then add SailPoint as a connector in the Mesh administrative portal.

Prerequisites​

  • Administrative access to your SailPoint portal, with permission to create an API client.
  • A Mesh administrator account with permission to manage connectors.
  • Your SailPoint Tenant ID.

Step 1 — Create a SailPoint API client​

Important

These steps reflect Axiad's current understanding of the SailPoint configuration. Because SailPoint is a third-party product, there may be slight variations between your experience and what this guide describes. We work hard to keep things as up to date as possible, but depending on the versions and updates in use, there may be some mismatches.

If you find any significant differences or anything that doesn't make sense, please share feedback with Axiad support.

To create a new API client, complete the following steps in the SailPoint administrative console:

  1. In the SailPoint portal, go to Admin → Global → Security Settings.
  2. On the Security Settings page, select API Management in the side menu.
  3. Select + New.
  1. Enter a friendly name for the Description.
  2. Check the Client Credentials and Refresh Token boxes.
  3. In the Refresh Token list, choose how long the token should be valid.
  4. Add the following Scopes:
    • idn:identity:read — view identities.
    • sp:auth-user:read — view user authentication system details.
    • sp:scopes:all — grant access to all rights associated with the user's or system's capabilities.
  5. Select Create.
  1. Copy the Client ID and Client Secret values. You'll enter them in Mesh in the next step.
Copy the credentials now

The Client ID and Client Secret won't be available after you close the window. If you don't copy them now, you'll need to create another new API client and copy those values instead.

Step 2 — Add the connector in Mesh​

You can add SailPoint as a connector from the Mesh administrative portal.

  1. From the homepage, select the gear icon to open the Settings page.
  1. On the Connectors page, select Add connector — in the middle of the page if this is your first connector, or in the upper right of the screen.
  1. In the dialog, set Name to a friendly name. This name appears on the Connectors page.
  2. Select SailPoint from the Provider list.
  3. Select your Instance Type from the list:
    • FedRAMP — your SailPoint deployment is a FedRAMP instance.
    • Custom — you have a custom domain for your SaaS SailPoint deployment.
    • Commercial — you have a standard enterprise SailPoint deployment.
  4. Set the SailPoint Tenant Identifier to your SailPoint Tenant ID value.
  5. Set the SailPoint Client Identifier to the Client ID value you copied from SailPoint.
  6. Set the SailPoint Client Secret to the Client Secret value you copied from SailPoint.
  1. Once all values are provided, select Test connection.
  2. Following a successful test, select Add & connect to complete the configuration.

Verify​

  • Your SailPoint connector appears on the Connectors page.