Skip to content

Integrating SailPoint with FusionAuth

FusionAuth is an identity and access management (IAM) platform that allows organizations to manage authentication, authorization, and user identity in a single system. It is commonly used by teams to centralize user management, enable secure access, and support features like SSO and MFA. This document provides instructions to configure a new direct connection to a FusionAuth source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The FusionAuth connector supports the following:

Account Management

  • FusionAuth connector supports account aggregation.

Entitlement Management

  • FusionAuth connector supports entitlement aggregation.

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  • Access to a FusionAuth Cloud-hosted environment.
  • An API Key created in FusionAuth.
    1. Log in to FusionAuth with Admin permissions.
    2. From the left navigation, go to Settings > API Keys.
    3. Select Add to create a new API Key.
    4. Provide a Name and optional Description for the API Key.
    5. Under Endpoints and Permissions, access must be granted for the following endpoints:
      • User Search > POST /api/user/search
      • Group Read > GET /api/group
      • Application Read >GET /api/application
    6. Select Save.
    7. For additional details, refer to the official FusionAuth API Documentation.

Required Permission

An API key with administrator access is required to use this connector. Only admin users can create and manage API keys.

The API key must have the following FusionAuth permissions enabled:

  • User Search

    • Endpoint:POST /api/user/search
    • Permission: User >Search

  • Group Read

    • Endpoint:GET /api/group
    • Permission: Group > Read
  • Application Read
    • Endpoint: GET /api/application
    • Permission: Application > Read

Refer to the FusionAuth documentation for API key creation and permission management.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.