Skip to content

Integrating SailPoint with Imprivata Vendor Privileged Access Management (VPAM) SaaS

Integration

This is an integration and requires additional licensing or subscriptions to utilize it. For more information, contact your customer success manager.

The SailPoint Imprivata Vendor Privileged Access Management (VPAM) SaaS connector provides governance capabilities for users and vendor representatives in the Imprivata VPAM system. The Imprivata VPAM SaaS connector capabilities include aggregating and provisioning users and vendor representatives, and adding or removing entitlements at the user and vendor representative level.

This guide is designed to give specific information about the requirements and field definitions needed to get a working instance of an Imprivata VPAM SaaS connector in SailPoint.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Imprivata VPAM SaaS connector supports the following features:

Account Management

For Standard Users

  • Manage standard users as "Accounts" in SailPoint
  • Manage "User Groups", "Roles", and "Credential Category" as Entitlements in SailPoint
  • Account aggregation
  • Entitlement aggregation
  • Create and modify users
  • Enable or disable users
  • Add or remove entitlements
  • Aggregation and provisioning of custom attributes. For more information, refer to Custom Attributes.
  • Access certification
  • Delete account

For Vendor Representatives

  • Manage vendor representatives as "Accounts" in SailPoint
  • Manage "Application Groups" and "Credential Category" as Entitlements in SailPoint
  • Account aggregation
  • Entitlement aggregation
  • Create and modify vendor representatives
  • Enable or disable vendor representatives
  • Add or remove entitlements
  • Provisioning of custom attributes. For more information, refer to Custom Attributes.

  • Access certification

  • Delete accounts

For more information on features, refer to Source Features.

Supported Managed Systems

The Imprivata VPAM SaaS connector supports integration with the Vendor Privileged Access Management (VPAM) on a cloud system.

Prerequisites

  • You must have a valid "Client" to perform successful operations. A Client uniquely identifies the user, and its components (ID and secret) must be treated with the same consideration as user credentials.

    Steps to generate Client Credentials from the managed Imprivata VPAM system
    1. Go to the System Admin > Settings > API Keys.
    2. Select API keys.

    3. Select Create Client.

      Upon Client creation, an ID and a secret will be provided, which can be used to obtain an access token.

Steps to find Vendor ID from the managed Imprivata VPAM system
  1. Go to the Imprivata VPAM portal > Vendors section.
  2. Select View Vendors.

  3. Select the Vendor Name under which you want to create a new Vendor Rep.

    You will find the vendorId at the end of the URL.

Required Permissions

Permissions for Users

Permission Category Description Department(s)
MANAGE_CREDENTIALS Credentials Allows a user to manage credentials -
CREATE_USER User/User Group Allows a user to create other users. Global
EDIT_USER User/User Group Allows a user to update other users. Global
DELETE_USER User/User Group Allows a user to delete other users. Global
VIEW_USER User/User Group Allows a user to view other users. Global
VIEW_USER_GROUP User/User Group Allows a user to view user groups. -
VIEW_ROLE User/User Group Allows a user to view the current system roles and permissions. -

Permissions for Vendor Representatives (Vendor Reps)

Permission Category Description Department(s)
MANAGE_CREDENTIALS Credentials Allows a user to manage credentials -
CREATE_VENDOR_REP Vendor Allows a user to create vendor reps. -
EDIT_VENDOR_REP Vendor Allows a user to edit vendor reps. -
VIEW_VENDOR Vendor Allows a user to view vendors. Global
VIEW_VENDOR_REP Vendor Allows a user to view vendor reps. -
DELETE_VENDOR_REP Vendor Allows a user to delete vendor reps. -
APPROVE_USER_CONNECTION Vendor Allows a user to approve vendor rep user connection requests. -

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.