Integrating SailPoint with Checkmk
Checkmk is an IT infrastructure monitoring platform that brings host discovery, service checks, alerting, and reporting together into one operational view. Rather than requiring teams to piece together separate agents, dashboards, and notification systems, Checkmk ships as a self-contained solution where automatic service discovery, flexible thresholding, and built-in visualization work out of the box, letting operations teams keep tabs on servers, network gear, and applications without stacking multiple specialized tools on top of each other. This document provides instructions to configure a new direct connection to a Checkmk source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Checkmk connector supports the following:
Account Management
- Aggregate Users
Entitlement Management
- Aggregate Roles
- Aggregate Contact Groups
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Before you configure the Checkmk connector, ensure the following requirements are met:
- Sign in to the Checkmk Portal and open your Site.
- Go to Setup > Users, and open an automation user (for example,
api_user) or create a new one. - Under Security, set Authentication to Automation secret for machine accounts.
- Select the dice icon to generate a secret and select Save.
- Copy and store the generated secret securely.