# Integrating SailPoint with Imprivata Vendor Privileged Access Management (VPAM) SaaS

> [!NOTE]
>
> **Integration**
>
> This is an integration and requires additional licensing or subscriptions to utilize it. For more information, contact your customer success manager.

The SailPoint Imprivata Vendor Privileged Access Management (VPAM) SaaS connector provides governance capabilities for users and vendor representatives in the Imprivata VPAM system. The Imprivata VPAM SaaS connector capabilities include aggregating and provisioning users and vendor representatives, and adding or removing entitlements at the user and vendor representative level.

This guide is designed to give specific information about the requirements and field definitions needed to get a working instance of an Imprivata VPAM SaaS connector in SailPoint.

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Imprivata VPAM SaaS connector supports the following features:

### Account Management

#### For Standard Users

- Manage standard users as "Accounts" in SailPoint
- Manage "User Groups", "Roles", and "Credential Category" as Entitlements in SailPoint
- Account aggregation
- Entitlement aggregation
- Create and modify users
- Enable or disable users
- Add or remove entitlements
- Aggregation and provisioning of custom attributes. For more information, refer to [Custom Attributes](<https://documentation.sailpoint.com/connectors/imprivata_vpam/saas/help/schema.html#custom-attributes>).
- Access certification
- Delete account

#### For Vendor Representatives

- Manage vendor representatives as "Accounts" in SailPoint
- Manage "Application Groups" and "Credential Category" as Entitlements in SailPoint
- Account aggregation
- Entitlement aggregation
- Create and modify vendor representatives
- Enable or disable vendor representatives
- Add or remove entitlements
- Provisioning of custom attributes. For more information, refer to [Custom Attributes](<https://documentation.sailpoint.com/connectors/imprivata_vpam/saas/help/schema.html#custom-attributes>).
- Access certification
- Delete accounts

For more information on features, refer to [Source Features](<https://community.sailpoint.com/knowledge/Identity-Security-Cloud-Source-Features>).

## Supported Managed Systems

The Imprivata VPAM SaaS connector supports integration with the Vendor Privileged Access Management (VPAM) on a cloud system.

## Prerequisites

- You must have a valid "Client" to perform successful operations. A Client uniquely identifies the user, and its components (ID and secret) must be treated with the same consideration as user credentials.

  > **Steps to generate Client Credentials from the managed Imprivata VPAM system**
  >
  > 1. Go to the **System Admin \> Settings \> API Keys**.
  > 2. Select **API keys**.
  > 3. Select **Create Client**.
  >
  >    Upon Client creation, an ID and a secret will be provided, which can be used to obtain an access token.

> [!NOTE]
>
> **Steps to find Vendor ID from the managed Imprivata VPAM system**
>
> 1. Go to the Imprivata VPAM portal \> **Vendors** section.
> 2. Select **View Vendors**.
> 3. Select the **Vendor Name** under which you want to create a new Vendor Rep.
>
>    You will find the `vendorId` at the end of the URL.

## Required Permissions

### Permissions for Users

| Permission | Category | Description | Department(s) |
| --- | --- | --- | --- |
| MANAGE\_CREDENTIALS | Credentials | Allows a user to manage credentials | \- |
| CREATE\_USER | User/User Group | Allows a user to create other users. | Global |
| EDIT\_USER | User/User Group | Allows a user to update other users. | Global |
| DELETE\_USER | User/User Group | Allows a user to delete other users. | Global |
| VIEW\_USER | User/User Group | Allows a user to view other users. | Global |
| VIEW\_USER\_GROUP | User/User Group | Allows a user to view user groups. | \- |
| VIEW\_ROLE | User/User Group | Allows a user to view the current system roles and permissions. | \- |

### Permissions for Vendor Representatives (Vendor Reps)

| Permission | Category | Description | Department(s) |
| --- | --- | --- | --- |
| MANAGE\_CREDENTIALS | Credentials | Allows a user to manage credentials | \- |
| CREATE\_VENDOR\_REP | Vendor | Allows a user to create vendor reps. | \- |
| EDIT\_VENDOR\_REP | Vendor | Allows a user to edit vendor reps. | \- |
| VIEW\_VENDOR | Vendor | Allows a user to view vendors. | Global |
| VIEW\_VENDOR\_REP | Vendor | Allows a user to view vendor reps. | \- |
| DELETE\_VENDOR\_REP | Vendor | Allows a user to delete vendor reps. | \- |
| APPROVE\_USER\_CONNECTION | Vendor | Allows a user to approve vendor rep user connection requests. | \- |