Integrating SailPoint with MongoDB Cloud - Atlas SaaS

This guide is designed to give specific information about the requirements and field definitions needed to get a working instance of a MongoDB Cloud - Atlas SaaS connector.

Supported Features

The SailPoint MongoDB Cloud - Atlas SaaS connector supports the following features:

• Aggregation of active MongoDB Cloud - Atlas SaaS users as accounts
• Add and remove entitlements for Role group objects
• Entitlement aggregation operations for Role group objects

For more information on supported features, refer to Source Features.

Revocation of Project Roles

If you revoke all project roles from an Atlas SaaS User, then the user is deleted from one project or multiple projects based on the selection of roles for revocation. Note that roles may belong to one project or multiple projects. While removing Organization roles from a user, at least one Organization role must be kept as assigned.

Activity Insights

Activity Insights supports activity from the MongoDB Cloud - Atlas SaaS source and its associated accounts. This enables you to gather account information and activity data from the MongoDB Cloud - Atlas SaaS source.

Supported Managed Systems

The MongoDB Cloud - Atlas SaaS connector supports the MongoDB Atlas SaaS Cloud source.

Prerequisites

• MongoDB Atlas SaaS can only connect from a trusted IP address. Within Atlas, you must create a list of trusted IP addresses that can be used to connect to a source and access data. For more information, refer to IP Address Allow List in the SailPoint Developer Community documentation.

• An Atlas SaaS API key is required to grant programmatic access to the MongoDB Project. This Atlas SaaS API key acts as the service account and is used to manage database users in each Project under a single Organization. The following permissions are required:

  Operation	Permission
  Test Connection	Organization member Project Read Only (For projects required to be managed)
  Account Aggregation	Organization member Project Read Only (For projects required to be managed)
  Entitlement Aggregation	Organization member Project Read Only (For projects required to be managed)
  Add/Remove Entitlement	Organization Owner

  Note

  If the list of managed Projects is long, assign Organization Read Only access instead of Project Read Only access for all Projects. This applies for Test Connection, Account Aggregation, and Group Aggregation processes.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.