Skip to content

Integrating SailPoint with Fortanix DSM

Fortanix Data Security Manager (DSM) is a unified, data-centric security platform that consolidates multiple cryptographic functions into a single system. It is designed to replace traditional, isolated security tools with a modern, cloud-scale architecture. This document provides instructions to configure a new direct connection to a Fortanix DSM source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Fortanix DSM connector supports the following:

Account Management

  • Aggregate Users

Entitlement Management

  • Aggregate Groups

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  1. Fortanix DSM tenant URL as Base URL.
  2. DSM username and password with API access.
  3. Account ID (acct_id) for the target DSM account context. To get the account ID:
    1. Log in to your DSM tenant.
    2. Go to Accounts.
    3. Open the target account details.
    4. Go to Settings and Copy the Account ID.

For more information about Fortanix DSM API, refer to the following resources:

Note

The linked document is not maintained by SailPoint and is subject to change without notice.

Required Permissions

  • The user must be active/enabled to access users/groups from the account.