Skip to content

Integrating SailPoint with Camunda

Camunda is a workflow and business process automation platform. It helps organizations model, execute, and monitor business processes and decisions. This document provides instructions to configure a new direct connection to a Camunda source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Camunda connector supports the following:

Account Management

  • Aggregate Users as Accounts

Entitlement Management

  • Aggregate Roles as entitlements

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  • You have Administrator access (or equivalent) to your Camunda deployment (self-managed or Camunda 8).
  • You have the REST API base URL for your Camunda engine (for example, https://<your-host>/engine-rest for Camunda 7, or the appropriate Camunda 8 API URL).
  • You have obtained API credentials (for example, username and password for HTTP Basic Authentication, or an access token) with permission to read users and groups.

Note

Refer to Camunda documentation for information about generating or configuring API access. For more information, refer Camunda API Documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.

Required Permissions

  • The credentials used for the connector must allow read access to the identity service (users and groups). This enables SailPoint to aggregate accounts and entitlements.