Skip to content

Integrating SailPoint with EspoCRM

EspoCRM is a free, open-source Customer Relationship Management (CRM) platform designed for small and medium-sized businesses. It helps companies manage and analyze their relationships with customers, partners, and other contacts through a simple, web-based interface. This document provides instructions to configure a new direct connection to an Espo CRM source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Espo CRM connector supports the following:

Account Management

  • Aggregate active Users

Entitlement Management (Teams)

  • Aggregate Teams

Supported Managed Systems

  • Espo CRM

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration

  • Access to a running EspoCRM instance (version 5.7 or later recommended).
  • An administrator account with permissions to configure API users and roles.
  • A dedicated API user created in EspoCRM (do not use a regular user account).
  • An API key generated for the API user.

Generate API Credentials

  1. Sign in to EspoCRM as an administrator.
  2. Go to Administration > API Users.
  3. Click Create API User.
  4. Select the authentication method (API Key or HMAC).
  5. Assign a role to the user. See Required permissions for details.

  6. Copy the generated API key.

    Note

    By default, users have minimal access. You must assign roles to grant specific access levels.

Required Permissions

To aggregate users and other data, the API user must have a role assigned with specific access rights. By default, API users have no permissions until a role is applied.

  1. Go to Administration > Roles.
  2. Create a new role (for example, “SailPoint Integration Role”) or edit an existing role.
  3. In the Access grid, configure the following permissions:
    • User scope
      • Read: Set to All (required to aggregate all user accounts)
      • Create and Edit: Set to Yes (required only if you intend to provision or update users)
    • Team scope
      • Read: Set to All (required to aggregate teams and departments)
    • Roles scope (optional but recommended)
      • Read: Set to All (required to manage user roles through the connector)
  4. Save the role.

  5. Assign the role to your API user.

    Resource Links

    Roles - EspoCRM Documentation | Usage Tutorial - EspoCRM Documentation

    Note

    The linked document is not maintained by SailPoint and is subject to change without notice.