# Connecting SailPoint and Ivanti Cherwell

To connect SailPoint with Ivanti Cherwell, perform the following tasks:

## Adding the Source in SailPoint

To connect to SailPoint, perform the following steps. Once the connection is made, you can configure it to meet your company's needs.

> [!IMPORTANT]
>
> By default, the provisioning feature is **disabled**, and the connector only supports read-only operations. To support provisioning operations, you must manually enable the feature in the source configuration.

**To configure a new source:**

1. Sign in to SailPoint.
2. Go to **Admin \> Connections \> Sources**.
3. Select **Create New**.
4. Search for the connector by entering the name in the search box, and then select **Configure**.
5. In the **Source Name** field, enter a unique and descriptive name for your source. Source names cannot exceed 128 characters.
6. In the **Description** field, provide additional details about the source to help distinguish it from similar sources. This field allows a maximum of 2,000 characters.
7. In the **Source Owner** field, begin typing the name of an owner. Matches appear after you type two or more letters. For more information, refer to [Assigning a Source Owner](<https://documentation.sailpoint.com/saas/help/sources/index.html#assigning-a-source-owner>).
8. Under **Connection Type**, select **Direct Connection** or **Flat File**.

   - **Direct Connection** - A direct connection fetches data from the **Virtual Appliance Cluster** you choose as the application connector for the source. A direct connection configuration allows for real-time updates. For more information about configuring and deploying virtual appliances, refer to the [Virtual Appliance Reference Guide](<https://documentation.sailpoint.com/saas/help/va/index.html>).
   - **Flat File** - Select the flat file if no connector is available, or if another system restricts the connection. This option allows only reading and aggregating data as a generic/delimited application. Provisioning activity is unsupported, and additional configuration pages like connection settings and aggregation settings are unavailable.
9. If you selected **Direct Connection**, in **Virtual Appliance Cluster**, select the virtual appliance cluster that will be used as the application connector for the source.
10. (Optional) Select a governance group to grant its members [source](<https://documentation.sailpoint.com/saas/help/common/users/user_levels.html#source-sub-admin-user-level>) or [role](<https://documentation.sailpoint.com/saas/help/common/users/user_levels.html#role-sub-admin-user-level>) sub-admin level oversight of the source and its access. For more information, refer to [Creating and Managing Governance Groups](<https://documentation.sailpoint.com/saas/help/common/users/governance_groups.html>).
11. If this source represents a primary system containing your organization's personnel records, select the **Authoritative Source** checkbox. For more information, refer to [Creating Identity Profiles](<https://documentation.sailpoint.com/saas/help/setup/identity_profiles.html>).
12. Select **Continue**. The source is created, and you are navigated to the **Source Setup \> Base Configuration** page. Continue to configure your connected source there.

## Connection Settings

Provide the information required for the connector to connect and interact with the source.

1. Enter the **Base URL** of the Ivanti Cherwell instance that you are integrating with. For example, `https://CSMSiteName.cherwell.com`
2. The **Authentication Type** is default selected as OAuth2.
3. Select your **Grant Type**:

   > **Password**
   >
   > Select the **Grant Type** as Password.
   >
   > > **Screenshot**
   > >
   > > [![Connection Settings - Password Grant Type](<https://documentation.sailpoint.com/connectors/ivanti_cherwell/va/help/img/connection_settings_password.png>)](<https://documentation.sailpoint.com/connectors/ivanti_cherwell/va/help/img/connection_settings_password.png>)
   >
   > 1. Enter the **Token URL** for URL for generating access token. For example, `https://CSMSiteName.cherwell.com/CherwellAPI/token`.
   > 2. Enter **Client ID** for OAuth2 authentication.
   > 3. Enter **Client Secret** for OAuth2 authentication.
   > 4. Enter the **Username** with Service Account username.
   > 5. Enter **Password** with Service Account user password.

   > **Refresh Token**
   >
   > Select the **Grant Type** as **Refresh Token**.
   >
   > > **Screenshot**
   > >
   > > [![Connection Settings - Refresh Token Grant Type](<https://documentation.sailpoint.com/connectors/ivanti_cherwell/va/help/img/connection_settings_refresh_token.png>)](<https://documentation.sailpoint.com/connectors/ivanti_cherwell/va/help/img/connection_settings_refresh_token.png>)
   >
   > 1. Enter the **Token URL** for URL for generating access token. For example, `https://CSMSiteName.cherwell.com/CherwellAPI/token`.
   > 2. Enter the **Client ID** for OAuth2 authentication.
   > 3. Enter a valid **Refresh Token**.
4. Select **Save**.

## Aggregation Settings

For more information about aggregation, refer to [Loading Account Data](<https://documentation.sailpoint.com/saas/help/accounts/loading_data.html>).

### Filter Settings

Configure the following filter parameters on the aggregation settings page.

> [!NOTE]
>
> **Screenshot**
>
> [![Aggregation Filter Settings](<https://documentation.sailpoint.com/connectors/ivanti_cherwell/va/help/img/aggregation_filter_settings.png>)](<https://documentation.sailpoint.com/connectors/ivanti_cherwell/va/help/img/aggregation_filter_settings.png>)

1. Select the **Account Login ID Type** to set the scope of login ids included in account aggregation processes. For example, `Internal`
2. Select the **Managed Account Type** to manage the type of account. For example, `Users`

### Customer Account Disable Status

> [!NOTE]
>
> **Screenshot**
>
> [![Customer Account Disable Status](<https://documentation.sailpoint.com/connectors/ivanti_cherwell/va/help/img/customer_disable_status.png>)](<https://documentation.sailpoint.com/connectors/ivanti_cherwell/va/help/img/customer_disable_status.png>)

1. Enter the Ivanti Cherwell customer account statuses which indicates a Disable status to the connector.

   > **Note**
   >
   > Whenever you define Ivanti Cherwell Customer status in the application, only those defined statuses will be set as disabled and remaining as Enabled. For more information, refer to [Disable Status Mapping](<https://documentation.sailpoint.com/connectors/ivanti_cherwell/va/help/status_mapping.html>).
2. Select **Save**.

## Review and Test

Perform a test to confirm the connection to SailPoint.

1. Go to **Review and Test**.
2. Confirm that the entries in each field are correct.

   If you note any mistakes, return to the section and make corrections.
3. Select **Test Connection**.

## SailPoint Application Onboarding

SailPoint application onboarding enables you to easily onboard new applications and create sources following the successful onboarding of a discovery source. To use this feature, continue to **Discovered Applications** in the SailPoint user interface.

For more information, refer to [Application Onboarding](<https://documentation.sailpoint.com/saas/help/ai/app_onboarding/index.html>) in the SailPoint SaaS documentation.