SailPoint

Version: 1.1
Updated: Jul 07, 2023

SailPoint is an identity management solution that helps organizations manage employee permissions, digital identities, information security, data access, compliance and more on a unified portal.

Actions

• Accounts List (Enrichment) - Returns a list of accounts.
• Get Account Activity (Enrichment) - Gets a single account activity by its ID.
• Get Account Details (Enrichment) - Returns the details for a single account based on the ID.
• Search Access Profiles (Enrichment) - Performs a search in access profiles with provided query and returns matching result collection.
• Search Roles (Enrichment) - Performs a search in roles with provided query and returns matching result collection.
• Search Entitlements (Enrichment) - Performs a search in entitlements with provided query and returns matching result collection.
• Search Events (Enrichment) - Performs a search in events with provided query and returns matching result collection.
• Search Identities (Enrichment) - Performs a search in identities with provided query and returns matching result collection.
• Search Query Aggregation (Enrichment) - Performs a search query aggregation and returns aggregation result.
• Enable Account (Containment) - This action submits a task to enable account and returns the task ID.
• Disable Account (Containment) - This action submits a task to disable the account and returns the task ID.
• List Personal Access Tokens (Enrichment) - Gets a collection of personal access tokens associated with the optional owner-id.
• Create Personal Access Token (Containment) - Creates a personal access token.
• Delete Personal Access Token (Containment) - Deletes a personal access token.

SailPoint configuration

1. Sign in in SailPoint using your username and password.
2. Go to your account in the right up corner and select Preferences.
3. In Preferences, select Personal Access Tokens.
4. Answer the Question What's this token for? And click Create Token.
5. Your secret and client ID will appear. Make sure you copy and save them.

Configure SailPoint in Automation Service and Cloud SOAR

Before you can use this automation integration, you must configure its authentication settings so that the product you're integrating with can communicate with Sumo Logic. For general guidance, see Configure Authentication for Automation Integrations.

How to open the integration's configuration dialog

1. Access App Central and install the integration. (You can configure at installation, or after installation with the following steps.)
2. Go to the Integrations page.
   Classic UI. In the main Sumo Logic menu, select Automation and then select Integrations in the left nav bar.
   New UI. In the main Sumo Logic menu, select Automation > Integrations. You can also click the Go To... menu at the top of the screen and select Integrations.
3. Select the installed integration.
4. Hover over the resource name and click the Edit button that appears.
   

In the configuration dialog, enter information from the product you're integrating with. When done, click TEST to test the configuration, and click SAVE to save the configuration.

In the Client ID and Client Secret fields, insert the previously copied client ID and secret respectively.

For information about SailPoint, see SailPoint documentation.

Change Log

• March 29, 2022 - First upload
• July 7, 2023 (v1.1) - Updated the integration with Environmental Variables