What is SailPoint IdentityNow? #
SailPoint IdentityNow is a SaaS-based IAM (identity and access management) solution that allows you to easily control user access to all systems and applications, enhance audit response and increase your operational efficiency. IdentityNow provides provisioning, single sign-on, password management, and access certification services for mobile, cloud, and on-premises applications.
Why Should You Use the SailPoint IdentityNow Connector? #
The SailPoint IdentityNow connector provides visibility into the users in your environment. You can use this visibility to:
-
ensure users are managed per your security policies
-
derive relationships between assets, users, applications, and data
How Does This Connector Work? #
Meridian executes read-only requests to the SailPoint IdentityNow REST API and ingests only meta-data about SailPoint IdentityNow devices. Meridian does not retrieve any data stored on your assets.
Configuring the Connector in Meridian #
| Field | Description | Example |
|---|---|---|
| URL | The URL for the SailPoint IdentityNow API. | https://acme.api.identitynow.com |
| Client ID | ID for a SailPoint IdentityNow account with read access. This account must be associated with ORG_ADMIN authority. For full details refer to https://developer.sailpoint.com/idn/api/authentication#generate-a-personal-access-token | ef38f94347e94562b5bb8424a56397d8. |
| Client Secret | The password for the SailPoint IdentityNow account. For details, refer to For full details refer to https://developer.sailpoint.com/idn/api/authentication#generate-a-personal-access-token | ************ |
| Minimum Number of Enrolled Apps | Minimum number of applications that must be are enrolled in SailPoint before compliance analysis. | 1 |
| Maximum Number of Enrolled Apps | Maximum number of applications that can be included in SailPoint compliance analysis. | 50 |
| Number of Certification Days | Number of days since last certification. Used by SailPoint compliance analysis. | 90 |
Source Documentation #
Creating Credentials #
For details on creating credentials to use with Meridian, see:
https://developer.sailpoint.com/docs/api/authentication/#generate-a-personal-access-token
Contact your Meridian Sales Representative for help with creating credentials.
Required Permissions #
The account you use to generate the client ID and client secret must have:
-
User level of ORG_ADMIN. For details on adding a user level to an account, see https://documentation.sailpoint.com/saas/help/common/users/user_levels.html?h=permissions
-
Scope of idn:accounts:read. By default, personal access tokens are asisgned the scope “sp:scopes:all”. For user level ORG_ADMIN, this scope already includes idn:accounts:read.
Contact your Meridian Sales Representative for help with permissions.
API Documentation #
API version V3
For details about the SailPoint APIs, see:
