Integrating SailPoint with MongoDB Cloud - Database SaaS

This guide is designed to give specific information about the requirements and field definitions needed to get a working instance of a MongoDB Cloud - Database SaaS connector.

Supported Features

The SailPoint MongoDB Cloud - Database SaaS connector supports the following features:

Account Management

• Aggregate MongoDB Cloud - Database SaaS users as accounts
• *Provision Accounts
  • Create, Update
  • Delete
• *Access Certifications (Certification of entitlements connected to accounts)
• *Password Management

Account - Group Management

• Aggregate MongoDB Cloud database roles as groups

To govern access, MongoDB employs Role-Based Access Control (RBAC), where each user is granted one or more roles that determine the user's access to database resources and operations. The MongoDB Cloud - Database SaaS source for SailPoint supports the Role group object for Add and Remove Entitlement operations.

For more information on features, refer to Source Features.

Password Management

If Password Management is enabled for your organization, you can change the password for a user of the source. After enabling password management on the source, be aware of the following:

• The password policy defined in SailPoint applies to accounts on this source.
• If you change the password for an application connected to this source, the change will automatically be made to the source itself.

For more information on configuring password management, refer to Password Management Overview.

Supported Managed Systems

The SailPoint MongoDB Cloud - Database SaaS connector supports MongoDB Databases on MongoDB Atlas Cloud.

Prerequisites

• MongoDB Atlas (where the MongoDB database resides) can only connect from a trusted IP address. Within Atlas, you must create a list of trusted IP addresses that can be used to connect to a source and access the data. For more information, refer to IP Address Allow List in the SailPoint Developer Community documentation.

• An Atlas API key is required to grant programmatic access to the MongoDB project. This Atlas API key acts as the service account and it is used to manage database users in each Project under a single Organization, where the following permissions are required:

  Operation	Permission
  Test Connection	Organization Member Project Read Only
  Account Aggregation	Organization Member Project Read Only
  Entitlement Aggregation	Organization Member Project Read Only
  Create	Organization Member Project Owner
  Update	Organization Member Project Owner
  Add/Remove Entitlement	Organization Member Project Owner

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.