# Integrating SailPoint with Guidewire ContactManager SaaS

> [!NOTE]
>
> **Integration**
>
> This is an integration and requires additional licensing or subscriptions to utilize it. For more information, contact your customer success manager.

The SailPoint Guidewire ContactManager connector offers capability of user identity security and identity governance administration on Guidewire Insurance Suite via SailPoint.

This guide is designed to give specific information about the requirements and field definitions needed to get a working instance of a Guidewire ContactManager SaaS connector in SailPoint.

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Guidewire ContactManager SaaS connector supports the following features:

### Account Management

- Manage Users as Accounts
- Aggregate Users
- Read, Create, Update, and Delete
- Enable/Disable User

### Group Management

- Read Entitlements (Group and Role)
- Add/Remove Entitlements (Group and Role) from the User
- Aggregate Entitlements (Group and Role)

## Prerequisites

- Guidewire ContactManager SaaS can only connect from a trusted IP address. Within ContactManager, you must create a list of trusted IP addresses that can be used to connect to a source and access the data. For more information, refer to [IP Address Allow List](<https://developer.sailpoint.com/docs/guides/ip-address-allow-list/>) in the SailPoint Developer Community documentation.
- Know the authentication option (OAuth 2.0 Authentication) to use for SailPoint to authenticate.
- [Configure SailPoint for provisioning](<https://documentation.sailpoint.com/saas/help/provisioning/create_profile.html>).
- Obtain OAuth credentials from Guidewire Cloud Support team.

> [!IMPORTANT]
>
> You must obtain OAuth credentials from the Guidewire Cloud Support team. After you receive the OAuth credentials, ensure that a `role.yaml` file is present in the Guidewire ContactManager SaaS environment, and then add the required endpoints mentioned in [Required Permissions](<#required-permissions>).

## Required Permissions

A user must have access to the following specified endpoints to perform necessary operations:

- `GET: /users`
- `POST: /users`
- `PATCH: /users/{userId}`
- `DELETE: /users/{userId}`
- `GET: /groups`
- `GET: /groups/{groupId}`
- `GET: /groups/{groupId}/users`
- `POST: /groups/{groupId}/users`
- `DELETE: /groups/{groupId}/users/{groupUserId}`
- `GET: /groups/{groupId}/users/{groupUserId}`
- `PATCH: /groups/{groupId}/users/{groupUserId}`
- `GET: /roles`
- `GET: /roles/{roleId}`

A user with read-only permissions requires access to the following endpoints to perform necessary operations:

- `GET: /users`
- `GET: /groups`
- `GET: /groups/{groupId}`
- `GET: /groups/{groupId}/users`
- `GET: /groups/{groupId}/users/{groupUserId}`
- `GET: /roles`
- `GET: /roles/{roleId}`

## Supported Managed Systems

The SailPoint Guidewire ContactManager SaaS connector supports the following releases of the Guidewire ContactManager application:

- The Olos release is identified by the 2025.11 release number, with application version 50.15.x.
- The Niseko release is identified by the 2025.07 release number, with application version 50.14.x.
- The Mammoth release is identified by the 2025.03 release number, with application version 50.13.x.

> [!NOTE]
>
> For more information, refer to [Guidewire Documentation](<https://docs.guidewire.com/gw-login?redirectTo=/is/latest/releasenotes/topics/r_release-name-mappings.html>).