Skip to content

Integrating SailPoint with Ezeep Blue

Ezeep Blue is a cloud printing platform that provides centralized management of users, roles, and print-related access across an organization. Ezeep Blue exposes REST-based APIs with OAuth 2.0 authentication, allowing external systems to read user and role information for governance use cases. This makes Ezeep Blue suitable for identity governance, access visibility, and quick compliance workflows in SailPoint. This document provides instructions to configure a new direct connection to an Ezeep Blue source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Ezeep Blue connector supports the following:

Account Management

  • Account aggregation

Entitlement Management

  • The Ezeep Blue connector aggregates roles as part of account aggregation

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  • Ensure you have an active Ezeep Blue organization and an administrator account with permission to view users.
  • Obtain a registered OAuth 2.0 client (Client ID and Client Secret) from the ezeep Blue Integration Team.
  • Configure a redirect URI registered with your OAuth client.
  • Obtain a refresh token through the OAuth 2.0 Authorization Code flow.

Obtain OAuth Credentials

  1. Contact the ezeep Blue Integration Team using the API Contact Form to request a Client ID and Client Secret.
  2. Provide the redirect URI(s) where users redirect after authorization. The redirect URI must match exactly what you register for your client.
  3. Configure the client for the Authorization Code flow as a confidential client (Client Secret required for server-side integrations).

Obtain a Refresh Token

  1. Redirect an authorized Ezeep Blue administrator to the authorization endpoint https://account.ezeep.com/oauth/authorize. Include the required query parameters: response_type=code, client_id, redirect_uri, and appropriate scopes (for example, openid).
  2. After the user grants consent, capture the authorization code from the redirect callback.
  3. Exchange the authorization code for tokens by sending a POST request to https://account.ezeep.com/oauth/access_token/.
  4. Copy and securely store the refresh token from the response. SailPoint uses this refresh token to obtain short-lived access tokens for API calls.

For technical details, refer to the Ezeep Blue API Documentation and Authorization documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.

Required Permissions

  • Service Account Integration: Use a dedicated non-personal integration account to complete the OAuth Authorization Code flow and generate the refresh token.
  • Organization Access: Ensure the authorizing account is an Ezeep Blue organization admin. Only admins can retrieve user information from the organization.
  • OAuth Client: Register a confidential OAuth client with the ezeep Blue Integration Team using the Authorization Code flow, with a registered redirect URI and refresh token support.
  • Required Scope: openid - required to authenticate and read user data from GET https://account.ezeep.com/v1/users/.