Integrating SailPoint with Ivanti Cherwell
The Ivanti Cherwell connector offers seamless connectivity to the Cherwell ITSM solution, enabling aggregation and provisioning of two distinct Cherwell user types: 'users' & 'customers'. This integration enables robust user access management and governance in the Cherwell System.
This document is designed to give specific information about the requirements and field definitions needed to getting a working instance of an Ivanti Cherwell source.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Ivanti Cherwell connector supports the following features:
Account Management
| Supported Features | User | Customer |
|---|---|---|
| Account Aggregation | Yes | Yes |
| Refresh Account | Yes | Yes |
| Create Account | Yes | Yes |
| Update Account | Yes | Yes |
| Delete Account | Yes | Yes |
| Unlock Account | Yes | No |
| Enable/Disable Account | No | Yes |
| Change Password | Yes | No |
| Add Entitlement | Yes | No |
| Remove Entitlement | No | No |
Account Group Management
Manages Cherwell Security Groups as Account-Group
- Aggregation, Refresh
Supported Managed Systems
The Ivanti Cherwell connector supports the following managed systems:
- Cherwell Service Management (cloud) version 2023.1.1
- Cherwell Service Management (cloud) version 10.4.0
Prerequisites
- Configure at least one virtual appliance cluster and successfully test the connection. For more information, refer to the Virtual Appliance Reference Guide.
- The user should have valid Ivanti Cherwell instance with Admin access to have client_id generated. For more information, refer to Obtaining API Client IDs.
- Know the authentication option (OAuth 2.0 Authentication) to use for SailPoint to authenticate.
- SailPoint Ivanti Cherwell Connector uses rotating Refresh Tokens authentication from Cherwell. Ensure after the first utilization of the refresh token for a test connection with the connector, you save the new Refresh Token.
Minimum Permissions Required
Security Group assigned to the service account requires View, Add, Edit and Delete permissions on the following Business Objects:
- Customer
- UserInfo
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.