SailPoint API Integrations
Build and run workflows using the SailPoint API. Use 1000s of source-available triggers and actions across 2,000+ apps. Or write custom code to integrate any app or API in seconds.
Overview#
The SailPoint API enables the automation of identity governance tasks, streamlining user access management, compliance controls, and security policies across an organization's IT environment. It's a powerful tool for managing identities, entitlements, and role-based access controls, ensuring that the right people have the right access at the right time. With Pipedream, you can use this API to create workflows that react to specific events, orchestrate multi-step processes, and integrate with other services to enhance identity operations.
import { axios } from "@pipedream/platform"
export default defineComponent({
props: {
sailpoint: {
type: "app",
app: "sailpoint",
}
},
async run({steps, $}) {
return await axios($, {
method: "post",
url: `https://https://{{custom_fields.tenant}}.{{custom_fields.domain}}/v3/public-identities`,
headers: {
'Authorization': `Bearer ${this.sailpoint.$auth.oauth_access_token}`
}
})
},
})
Choose an API to Connect with SailPoint API#
1-24of2,000+apps by most popular
Example Use Cases#
Automated User Onboarding and Offboarding: Trigger a workflow in Pipedream when a new employee is added to your HR system, such as BambooHR. Automatically create accounts in SailPoint, assign appropriate access rights based on role, and send an email to the new user with their account details using SendGrid. Conversely, when an employee leaves, ensure access is revoked across all systems and confirm deprovisioning with a message to a Slack channel.
Periodic Access Reviews and Compliance Audits: Schedule a recurring workflow in Pipedream that initiates an access review process in SailPoint. Fetch a list of users and their access rights, compare it against compliance requirements or a predefined access matrix, and flag any discrepancies. The workflow could then open a ticket in a system like ServiceNow, requesting review and adjustment of access rights.
Real-time Security Alerts and Remediation: Monitor SailPoint for irregular access patterns or policy violations using Pipedream's event sources. On detecting an anomaly, the workflow could post an alert to a security team's Slack channel, create an incident in PagerDuty, and temporarily suspend the user's access pending investigation, all automatically, reducing response time and potential security risks.
Authentication#
SailPoint uses OAuth authentication. When you connect your SailPoint account, Pipedream will open a popup window where you can sign into SailPoint and grant Pipedream permission to connect to your account. Pipedream securely stores and automatically refreshes the OAuth tokens so you can easily authenticate any SailPoint API.
Pipedream requests the following authorization scopes when you connect your account:
- accessToken
POSThttps://{{custom_fields.tenant}}.{{custom_fields.domain}}/oauth/token?grant_type=client_credentials&client_id={{custom_fields.client_id}}&client_secret={{custom_fields.secret}}accept:application/json - refreshToken
POSThttps://{{custom_fields.tenant}}.{{custom_fields.domain}}/oauth/token?client_id={{custom_fields.client_id}}&client_secret={{custom_fields.secret}}&grant_type=client_credentialscontent-type:application/x-www-form-urlencodedaccept:application/json