# Integrating SailPoint with Ivanti Cherwell

The Ivanti Cherwell connector offers seamless connectivity to the Cherwell ITSM solution, enabling aggregation and provisioning of two distinct Cherwell user types: 'users' & 'customers'. This integration enables robust user access management and governance in the Cherwell System.

This document is designed to give specific information about the requirements and field definitions needed to getting a working instance of an Ivanti Cherwell source.

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Ivanti Cherwell connector supports the following features:

### Account Management

| Supported Features | User | Customer |
| --- | --- | --- |
| Account Aggregation | Yes | Yes |
| Refresh Account | Yes | Yes |
| Create Account | Yes | Yes |
| Update Account | Yes | Yes |
| Delete Account | Yes | Yes |
| Unlock Account | Yes | No |
| Enable/Disable Account | No | Yes |
| Change Password | Yes | No |
| Add Entitlement | Yes | No |
| Remove Entitlement | No | No |

### Account Group Management

Manages Cherwell Security Groups as Account-Group

- Aggregation, Refresh

## Supported Managed Systems

The Ivanti Cherwell connector supports the following managed systems:

- Cherwell Service Management (cloud) version 2023.1.1
- Cherwell Service Management (cloud) version 10.4.0

## Prerequisites

- Configure at least one virtual appliance cluster and successfully test the connection. For more information, refer to the [Virtual Appliance Reference Guide](<https://documentation.sailpoint.com/saas/help/va/index.html>).
- The user should have valid Ivanti Cherwell instance with Admin access to have client\_id generated. For more information, refer to [Obtaining API Client IDs](<https://help.cherwell.com/bundle/cherwell_rest_api_2023_1_help_only/page/content/system_administration/rest_api/csm_rest_obtaining_client_ids.html>).
- Know the authentication option (OAuth 2.0 Authentication) to use for SailPoint to authenticate.
- SailPoint Ivanti Cherwell Connector uses rotating Refresh Tokens authentication from Cherwell. Ensure after the first utilization of the refresh token for a test connection with the connector, you save the new Refresh Token.

### Minimum Permissions Required

Security Group assigned to the service account requires View, Add, Edit and Delete permissions on the following Business Objects:

- Customer
- UserInfo