# Connecting SailPoint and Identity Security Cloud Governance SaaS

To connect SailPoint with Identity Security Cloud Governance, perform the following tasks:

## Adding the Source in SailPoint

To connect to SailPoint, perform the following steps. Once the connection is made, you can configure it to meet your company's needs.

> [!IMPORTANT]
>
> By default, the provisioning feature is **disabled**, and the connector only supports read-only operations. To support provisioning operations, you must manually enable the feature in the source configuration.

**To configure a new source:**

1. Sign in to SailPoint.
2. Go to **Admin \> Connections \> Sources**.
3. Select **Create New**.
4. Search for the connector by entering the name in the search box, and then select **Configure**.
5. In the **Source Name** field, enter a unique and descriptive name for your source. Source names cannot exceed 128 characters.
6. In the **Description** field, provide additional details about the source to help distinguish it from similar sources. This field allows a maximum of 2,000 characters.
7. In the **Source Owner** field, begin typing the name of an owner. Matches appear after you type two or more letters. For more information, refer to [Assigning a Source Owner](<https://documentation.sailpoint.com/saas/help/sources/index.html#assigning-a-source-owner>).
8. (Optional) Select a governance group to grant its members [source](<https://documentation.sailpoint.com/saas/help/common/users/user_levels.html#source-sub-admin-user-level>) or [role](<https://documentation.sailpoint.com/saas/help/common/users/user_levels.html#role-sub-admin-user-level>) sub-admin level oversight of the source and its access. For more information, refer to [Creating and Managing Governance Groups](<https://documentation.sailpoint.com/saas/help/common/users/governance_groups.html>).
9. If this source represents a primary system containing your organization's personnel records, select the **Authoritative Source** checkbox. For more information, refer to [Creating Identity Profiles](<https://documentation.sailpoint.com/saas/help/setup/identity_profiles.html>).
10. Select **Continue**. The source is created, and you are navigated to the **Source Setup \> Base Configuration** page. Continue to configure your connected source there.

## Connection Settings

The following information is required for SailPoint to connect and interact with Identity Security Cloud Governance.

> [!NOTE]
>
> **Screenshot**
>
> [![Connection Settings](<https://documentation.sailpoint.com/connectors/identity_security_cloud_governance/saas/help/img/connection_settings.png>)](<https://documentation.sailpoint.com/connectors/identity_security_cloud_governance/saas/help/img/connection_settings.png>)

1. Enter the **API URL** path used to connect to the target tenant.
2. Select the **Grant Type** as Client Credentials.
3. Enter the **Client ID** of the managed system.
4. Enter the **Client Secret** of the managed system.
5. Enter the time span in **Connection Timeout** after which an aggregation operation terminates.
6. Select **Save**.

## Aggregation Settings

This section provides the details required for aggregating the user accounts.

For more information about aggregation, refer to [Loading Account Data](<https://documentation.sailpoint.com/saas/help/accounts/loading_data.html>).

> [!NOTE]
>
> **Screenshot**
>
> [![Aggregation Settings](<https://documentation.sailpoint.com/connectors/identity_security_cloud_governance/saas/help/img/aggregation_settings.png>)](<https://documentation.sailpoint.com/connectors/identity_security_cloud_governance/saas/help/img/aggregation_settings.png>)

1. Go to **Aggregation Settings \> Filter Settings**.
2. Enter the appropriate **Account Aggregation Filter**. For more information, refer to [Account Aggregation Filter](<#account-aggregation-filter>).
3. Enter the appropriate **Governance Group Aggregation Filter**. For more information, refer to [Governance Group Aggregation Filter](<#governance-group-aggregation-filter>).
4. Enter the number of records in **Page Size** to aggregate in a single page when iterating over large datasets. You can set it from 1 to 250. The default is 200.
5. Select **Enable User Level Caching** to create cache objects of user levels for faster access during account aggregation.

   > **Note**
   >
   > During update, it may create additional cache, which can affect aggregation and get object operation.
6. Select **Save**.

> [!NOTE]
>
> If no filters are applied, the system will fetch all available data.

### Account Aggregation Filter

Following operators and attributes are supported.

| Attribute | Operator |
| --- | --- |
| id | eq, in |
| Name | eq, sw |
| email | eq, sw |
| First Name | eq, sw |
| Last Name | eq, sw |

For example, to filter account names starting with ISCUser, use `name sw "ISCUser"`.

### Governance Group Aggregation Filter

Following operators and attributes are supported.

| Attribute | Operator |
| --- | --- |
| id | eq, in |
| Name | eq, sw |

For example, to filter Governance Groups with names starting with "ISCGroup," use `name sw "ISCGroup"`.

## Reassignment Settings

> [!NOTE]
>
> **Screenshot**
>
> [![Reassignment Settings](<https://documentation.sailpoint.com/connectors/identity_security_cloud_governance/saas/help/img/reassignment_options.png>)](<https://documentation.sailpoint.com/connectors/identity_security_cloud_governance/saas/help/img/reassignment_options.png>)

1. Select the **Objects** and **Tasks** owned by a user to reassign to their Identity Manager after the governance account user is disabled. Your selections apply to all objects and tasks of that type.

   > **Note**
   >
   > The **Pending Request Decisions** checkbox reassigns access request decisions (approvals) only if the disabled user is also the owner of an access item, such as an access profile.
2. Select **Save**.

> [!NOTE]
>
> To ensure the effective functioning of reassignment, it is essential for the identities to have a direct line manager. Without this, the objects and tasks cannot be reassigned.

## Review and Test

Perform a test to confirm the connection to SailPoint.

1. Go to **Review and Test**.
2. Confirm that the entries in each field are correct.

   If you note any mistakes, return to the section and make corrections.
3. Select **Test Connection**.

## SailPoint Application Onboarding

SailPoint application onboarding enables you to easily onboard new applications and create sources following the successful onboarding of a discovery source. To use this feature, continue to **Discovered Applications** in the SailPoint user interface.

For more information, refer to [Application Onboarding](<https://documentation.sailpoint.com/saas/help/ai/app_onboarding/index.html>) in the SailPoint SaaS documentation.