Integrating SailPoint with Huawei Cloud
Huawei Cloud is a globally distributed cloud computing platform offering infrastructure, platform, and software services for enterprise workloads. It provides identity and access management (IAM) capabilities for managing users, groups, and projects at scale. This document provides instructions to configure a new direct connection to a Huawei Cloud source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Huawei Cloud connector supports the following:
Account Management
- Aggregate Users
Entitlement Management
- Aggregate Groups and Projects
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Ensure the following prerequisites are met before proceeding with the configuration:
- You have an active Huawei Cloud account with IAM administrator access.
- You can generate an API token (X-Auth-Token) via the Huawei Cloud IAM authentication endpoint.
- The token-generating user has the appropriate IAM permissions to list users, groups, and projects.
-
To generate the API token, complete the following steps:
- Follow the official Huawei Cloud authentication guide at Huawei Cloud Authentication.
- Once generated, extract the X-Subject-Token value from the response header - this is your API token.
Important
The validity period of a token is 24 hours.
-
Huawei Cloud uses region-specific IAM endpoints. Select the appropriate base URL for your account’s data center. For the complete list of regional endpoints, refer to the Huawei Cloud regional endpoints documentation.
Required Permissions
- The IAM user account used to generate the API token must have at minimum read permissions for users (including User to Group memberships and User to Project memberships), groups, and projects in Huawei Cloud IAM.
- To assign permissions, create a user group with the appropriate IAM read policy and add the service account to that group.
- For more information about assigning permissions, refer to the following resources:
Note
The linked document is not maintained by SailPoint and is subject to change without notice.