# SailPoint Connector Integration

Integrate SailPoint as a connector in Axiad Mesh to retrieve user, application
access, credential, and entitlement data. This gives Mesh broad visibility into
the non-identity-centric applications that SailPoint provisions identities to
or draws identity information from.

Setting up the integration has two parts: configure a new API client in
SailPoint, then add SailPoint as a connector in the Mesh administrative portal.

## Prerequisites

- Administrative access to your SailPoint portal, with permission to create an
  API client.
- A Mesh administrator account with permission to manage connectors.
- Your SailPoint **Tenant ID**.

## Step 1 — Create a SailPoint API client

> **warning**
These steps reflect Axiad's current understanding of the SailPoint
configuration. Because SailPoint is a third-party product, there may be slight
variations between your experience and what this guide describes. We work hard
to keep things as up to date as possible, but depending on the versions and
updates in use, there may be some mismatches.

If you find any significant differences or anything that doesn't make sense,
please share feedback with Axiad support.

To create a new API client, complete the following steps in the SailPoint
administrative console:

1. In the SailPoint portal, go to **Admin → Global → Security Settings**.
2. On the **Security Settings** page, select **API Management** in the side
   menu.
3. Select **+ New**.

4. Enter a friendly name for the **Description**.
5. Check the **Client Credentials** and **Refresh Token** boxes.
6. In the **Refresh Token** list, choose how long the token should be valid.
7. Add the following **Scopes**:
   - `idn:identity:read` — view identities.
   - `sp:auth-user:read` — view user authentication system details.
   - `sp:scopes:all` — grant access to all rights associated with the user's
     or system's capabilities.
8. Select **Create**.

9. Copy the **Client ID** and **Client Secret** values. You'll enter them in
   Mesh in the next step.

> **warning**
The **Client ID** and **Client Secret** won't be available after you close the
window. If you don't copy them now, you'll need to create another new API
client and copy those values instead.

## Step 2 — Add the connector in Mesh

You can add SailPoint as a connector from the Mesh administrative portal.

1. From the homepage, select the gear icon to open the **Settings** page.

2. On the **Connectors** page, select **Add connector** — in the middle of the
   page if this is your first connector, or in the upper right of the screen.

3. In the dialog, set **Name** to a friendly name. This name appears on the
   **Connectors** page.
4. Select **SailPoint** from the **Provider** list.
5. Select your **Instance Type** from the list:
   - **FedRAMP** — your SailPoint deployment is a FedRAMP instance.
   - **Custom** — you have a custom domain for your SaaS SailPoint deployment.
   - **Commercial** — you have a standard enterprise SailPoint deployment.
6. Set the **SailPoint Tenant Identifier** to your SailPoint **Tenant ID**
   value.
7. Set the **SailPoint Client Identifier** to the **Client ID** value you
   copied from SailPoint.
8. Set the **SailPoint Client Secret** to the **Client Secret** value you
   copied from SailPoint.

9. Once all values are provided, select **Test connection**.
10. Following a successful test, select **Add & connect** to complete the
    configuration.

## Verify

- Your SailPoint connector appears on the **Connectors** page.