# Integrating SailPoint with Bigin

This document provides instructions to configure a new direct connection between SailPoint and Bigin.Bigin is a pipeline-centric customer relationship management (CRM) platform by Zoho that allows organizations to securely manage customer interactions, sales pipelines, and team operations. It provides a streamlined environment where teams can automate sales workflows, track deals across various stages, and manage user access in a centralized space. Bigin offers a robust REST API for retrieving key identity data such as users, profiles, and roles. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Bigin connector supports the following:

### Account Management

- Aggregate all users from Bigin

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

### Entitlement Management (Roles)

- Aggregate Roles

### Supported Managed Systems

- Bigin

### Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

- **Bigin Account:** You have access to a Bigin by Zoho CRM instance.
- **Administrator Access:** You have an administrator account in Bigin to generate OAuth credentials.
- **Zoho API Console Access:** You have registered an application in the Zoho API Console to obtain OAuth 2.0 credentials.
- **Client ID:** Obtained from the Zoho API Console after registering your application.
- **Client Secret:** Obtained from the Zoho API Console after registering your application.
- **Refresh Token:** Generated via the Zoho OAuth 2.0 authorization flow with the required scopes.

### API Authentication

The connector uses **OAuth 2.0** with a refresh token grant type for authentication. The connector automatically obtains an access token using the provided refresh token, client ID, and client secret.

To generate your OAuth credentials:

1. Sign in to the [Zoho API Console](<https://accounts.zoho.in/signin?servicename=AaaServer&amp;context=&amp;serviceurl=https%3A%2F%2Fapi-console.zoho.in%2F>).
2. Click **Add Client** and select **Server-based Applications**.
3. Fill in the required details (Client Name, Homepage URL, Authorized Redirect URI).
4. Copy the generated **Client ID** and **Client Secret.**
5. Generate a **Refresh Token** using the OAuth 2.0 authorization flow with the following scopes:

   - `ZohoBigin.users.ALL`
   - `ZohoBigin.settings.roles.ALL`

   > **Note**
   >
   > The refresh token does not expire unless explicitly revoked. However, if you regenerate it, the previous token becomes invalid. Store it securely.

### Required Permissions

- The OAuth application must be granted scopes to read users and roles.
- Minimum required scopes:

  - `ZohoBigin.users.ALL`- Required to aggregate all user accounts
  - `ZohoBigin.settings.roles.ALL` - Required to aggregate roles
- The user who generates the refresh token must have **Administrator** privileges in Bigin.

> [!NOTE]
>
> [Scopes | Online Help - Bigin](<https://www.bigin.com/developer/docs/apis/v2/scopes.html>)