# Integrating SailPoint with Akaunting

The Akaunting connector enables SailPoint to aggregate users for a single Akaunting company and their role names for that company. This document provides the instructions required to configure a new direct connection between SailPoint and Akaunting. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Akaunting connector supports the following:

### Account Management

- Aggregate Users

> [!NOTE]
>
> Roles are aggregated with users as an account entitlement on the `role` attribute. A separate entitlement schema is not used.

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## What Gets Aggregated

Each SailPoint source is tied to one Akaunting company.

```text
Akaunting
 └── Company you enter in Connection Settings
      └── Users of that company   → accounts
           └── Role               → entitlement
```

| In SailPoint | In Akaunting |
| --- | --- |
| Account | User |
| Entitlement | Role (for example Manager, Accountant) |
| Source scope | One company (Company Id) |

**Notes for administrators**

- If you need more than one company, create a separate source for each Company Id.
- A person can exist in several Akaunting companies. This source only shows them if they belong to the Company Id you configured.
- Role is the access level defined on the user in Akaunting. It is not a separate catalog you manage in SailPoint.

## Prerequisites

Before you add the source in SailPoint:

- You have an Akaunting Cloud tenant (`https://app.akaunting.com`) or a self-hosted Akaunting URL.
- You can sign in with a user that can view **Users** (typically **Manager** on Cloud, or **Admin** on self-hosted).
- You know which company you want SailPoint to govern.
- You have that company's **Company Id** (see below). Do **not** use the Account Dashboard API Key. Sign-in email and password are enough.

### How to Find the Company Id

Company Id is the number Akaunting puts in the browser address after you open a company. You do not look it up in a developer tool.

1. Sign in to Akaunting.
2. Open the company you want SailPoint to govern:

   - Select the **company switcher** in the navigation menu, then choose the company **or**
   - Select **Manage Companies** and switch to that company.
3. Look at the address bar. The number after the host is the Company Id.

**Example**

`https://app.akaunting.com/405319/dashboard`

Company Id = `405319`

Use that value in SailPoint **Company Id**.

### Auth Notes

> [!NOTE]
>
> - Akaunting REST supports **HTTP Basic only** (`email:password`).
> - There is **no OAuth / Bearer** for `/api/...`.
> - Account Dashboard **API Key** is for Apps/plan only - **not** for REST aggregation.

Header format:

```text
Authorization: Basic base64(email:password)
```

The connector uses **Basic Login**. SailPoint should build `$application.accesstoken$` as Base64(`username:password`) and send Basic auth on operations. You should not paste Base64 as the password.

## Required Permissions

| Who | Access |
| --- | --- |
| Manager / Admin (recommended service account) | Users list, companies list, API read |
| Accountant / Employee / Customer | Often insufficient for full user aggregation |

## Product Links

- [Akaunting website](<https://akaunting.com/>)
- [REST API documentation](<https://akaunting.com/hc/docs/developers/restful-api/>)
- [API routes (source of truth)](<https://github.com/akaunting/akaunting/blob/master/routes/api.php>)
- [Roles and permission levels](<https://akaunting.com/hc/docs/users-and-roles/roles-and-permission-levels/>)
- [Postman workspace](<https://www.postman.com/akaunting/workspace/akaunting>)

> [!NOTE]
>
> The linked document is not maintained by SailPoint and is subject to change without notice.
