# Integrating SailPoint with MongoDB Cloud - Database

This guide is designed to give specific information about the requirements and field definitions needed to get a working instance of a MongoDB Cloud - Database connector.

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The SailPoint MongoDB Cloud - Database connector supports the following features:

> [!NOTE]
>
> Before you can use any item marked with an asterisk (\*), SailPoint must activate the feature for your site.

#### Account Management

- Aggregate MongoDB Cloud - Database users as accounts
- \*Provision Accounts

  - Create, Update and delete accounts
- \*Access Certifications (Certification of entitlements connected to accounts)
- \*Password Management

#### Account - Group Management

- Aggregate MongoDB Cloud database roles as groups

To govern access, MongoDB employs Role-Based Access Control (RBAC), where each user is granted one or more roles that determine the user's access to database resources and operations. The MongoDB Cloud - Database source for SailPoint supports the Role group object for Add and Remove Entitlement operations.

For more information on features, refer to [Source Features](<https://community.sailpoint.com/knowledge/Identity-Security-Cloud-Source-Features>).

#### Password Management

If Password Management is enabled for your organization, you can change the password for a user of the source. After enabling password management on the source, be aware of the following:

- The password policy defined in SailPoint applies to accounts on this source.
- If you change the password for an application connected to this source, the change will automatically be made to the source itself.

For more information on configuring password management, refer to [Password Management Overview](<https://documentation.sailpoint.com/saas/help/pwd/index.html>).

## Supported Managed Systems

The SailPoint MongoDB Cloud - Database connector supports MongoDB Databases on MongoDB Atlas Cloud.

## Prerequisites

- Configure at least one [virtual appliance (VA) cluster](<https://documentation.sailpoint.com/saas/help/va/index.html>) and successfully test the connection.
- MongoDB Atlas (where the MongoDB database resides) can only connect to a cluster from a trusted IP address. Within Atlas, you must create a list of trusted IP addresses that can be used to connect to your cluster and access the data.
- An Atlas API key is required to grant programmatic access to the MongoDB project. This Atlas API key acts as the service account and it is used to manage database users in each Project under a single Organization, where the following permissions are required:

  | Operation | Permission |
  | --- | --- |
  | Test Connection | Organization Member<br>Project Read Only |
  | Account Aggregation | Organization Member<br>Project Read Only |
  | Entitlement Aggregation | Organization Member<br>Project Read Only |
  | Create | Organization Member<br>Project Owner |
  | Update | Organization Member<br>Project Owner |
  | Add/Remove Entitlement | Organization Member<br>Project Owner |