Skip to content

Integrating SailPoint with Claude Enterprise

SailPoint's Claude Enterprise connector supports access governance for Anthropic Claude Enterprise users, compliance roles, compliance groups, and Claude Managed Agents. This integration helps you enforce policy-based access controls so that only the appropriate users can access critical AI Agents. It enables you to manage users, compliance, and AI agents across your organization.

You can use this documentation for the requirements and field definitions that you need to configure the Claude Enterprise connector. To manage account data, create an identity profile based on the source, or verify that the loaded accounts correlate to an existing identity.

To connect to Claude, refer to Connecting SailPoint and Claude.

For Claude Managed Agents and machine identity settings, refer to Machine Identity Governance Settings.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Claude Enterprise source supports the following features:

  • Account Aggregation
    • All organization users as accounts.
  • Entitlement Aggregation
    • Organization roles (organizationRole), compliance roles (complianceRole), and compliance groups as entitlements.
  • Privilege Classification
    • Recommended privilege levels for organization roles. For the role-to-level mapping, refer to Entitlement Attributes.
  • Machine Identity Aggregation
    • Managed Agents from beta APIs into Agent Identity Security.

Note

To aggregate agents, SailPoint is using beta API endpoints that are subject to change. SailPoint is aligned with Anthropic to manage future changes.

Note

Datasets are also available in SailPoint Agentic Fabric. Contact your Customer Success team and refer to SailPoint Agentic Fabric for more information.

Non-Human Identity Discovery

  • Aggregate Claude Managed Agents

Refer to Machine Identity Governance Settings for more information.

Refer to Discovering Potential Non-Human Accounts for more information.

Prerequisites

The following prerequisites are required:

  • You must be a Primary Owner on a Claude Enterprise plan.
  • Compliance API must be enabled.
  • A compliance API Key created.

Note

Claude Enterprise plans generally include Compliance API, except for Public Sector organizations.

To enable the Compliance API and create a compliance API key:

  1. Select Organization settings > Data and privacy.
  2. In the Compliance API section, select Enable.
  3. Select + Create key to create compliance access keys.
  4. Provide the following scopes:
    • read:compliance_org_data
    • read:compliance_user_data
    • read:compliance_activities

To create a Workspace API key:

  1. Select Organization settings > API Keys.
  2. Create a new API key by selecting + Create key.
  3. Record the organization name and workspace name. They are required for the workspace identifier.

Note

API keys are owned by workspaces and remain active even after the creator is removed.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.