Skip to content

Integrating SailPoint with Akeyless SaaS

The SailPoint Akeyless SaaS connector is a read-only connector. It provides metadata-only visibility into Akeyless items so you can inventory managed secrets as credentials in SailPoint. The connector authenticates to the Akeyless REST API using an API Key or Universal Identity authentication method. It validates connectivity without retrieving secret values. For more information, refer to Supported Features.

This guide describes how to connect SailPoint to Akeyless.

To bring Akeyless SaaS credentials into SailPoint, create a direct connect source using Express Setup or Standard Setup. After you configure the source, use Dataset Management to configure owner correlation and dataset aggregation, discover Akeyless Item resources, and govern them in SailPoint.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The SailPoint Akeyless SaaS connector is a read-only connector. It supports the following features:

Feature Description
Test Connection Validates authentication and connectivity to the Akeyless API. A successful test confirms that SailPoint can reach the API over HTTPS and exchange the configured credentials for a session token.
Dataset Aggregation Discovers Akeyless Item metadata managed in Akeyless. Secret values are not retrieved.

Non-Human Identity Discovery

  • Aggregate Akeyless Items (item metadata only; secret values are not retrieved)

Refer to Dataset Management for more information.

Refer to Discovering Potential Non-Human Accounts for more information.

Supported Managed Systems

The SailPoint Akeyless SaaS connector supports the following managed systems:

  • Akeyless Vault public SaaS (https://api.akeyless.io)

Prerequisites

The Akeyless SaaS connector authenticates using one of two Akeyless authentication methods. Create the matching authentication method in Akeyless and attach a read-only role.

The following table describes the credentials you provide in SailPoint:

Method Access type Credentials
API Key access_key Access ID and Access Key
Universal Identity universal_identity Access ID and UID Token

Creating an Authentication Method in Akeyless

In the Akeyless Console, create the authentication method the connector will use. UI labels can vary by Akeyless release. For UI-specific steps, refer to Akeyless documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.

API Key

  1. Go to Users & Access > Authentication Methods.
  2. Select New > API Key.
  3. Enter a descriptive name, for example SailPoint_ISC_API_Key.
  4. Save the authentication method, then copy and store the generated Access ID and Access Key. The Access Key is shown only once.

Universal Identity

  1. Go to Users & Access > Authentication Methods.
  2. Select New > Universal Identity.
  3. Enter a descriptive name, for example SailPoint_ISC_Universal.
  4. Save the authentication method, then copy and store the Access ID and generate a UID Token for the connector.

Note

Store the Access Key or UID Token securely. SailPoint uses it to obtain a session token. The value in Akeyless must match the value configured in Connection Settings.

Creating a Read-Only Access Role

  1. Go to Users & Access > Roles.
  2. Create a new role, for example SailPoint_ReadOnlyRole.
  3. Grant read-only permissions on the paths the connector reads. For more information, refer to Required Permissions.
  4. Associate the role with the authentication method by its Access ID.

Required Permissions

The Akeyless authentication method, through its attached role, must have read-only capabilities.

For Test Connection, the ability to authenticate (POST/auth) is sufficient. For the read-only, grant List and Read on the following:

  • Items (secrets metadata)

Note

All access is metadata-only.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.