Skip to content

Integrating SailPoint with Infisical

Infisical functions as a developer-focused secrets management platform that consolidates secret storage, dynamic secret generation, access control, and secret rotation into a single, unified operational dashboard. Unlike sprawling enterprise vault solutions that force teams to stitch together separate tools for secrets, access policies, and audit trails, Infisical builds its own tightly integrated toolset around a deliberately simple, dev-friendly interface to directly encrypt and version environment variables and API keys, insulate engineering teams from credential sprawl through centralized machine identities and fine-grained role-based permissions, and surface actionable visibility without the overhead of heavier enterprise vault platforms. This document provides the instructions required to configure a new direct connection between SailPoint and Infisical. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Infisical connector supports the following:

Account Management

  • Aggregate Organization Users

Entitlement Management

  • Aggregate Organization Roles

Note

This connector is read-only. It supports test connection, account aggregation, and entitlement aggregation for Quick Compliance. Provisioning, de-provisioning, and write operations are not supported.

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Before you configure the Infisical connector, ensure the following requirements are met:

  1. Sign in to the Infisical Portal.
  2. Go to Administration > Access Control > Machine Identities and select Create Machine Identity.
  3. Provide a name and required role for the Machine Identity.
  4. Go to the created Machine Identity, then go to Universal Auth > View Auth Method.
  5. Select Add Client Secret.
  6. Copy the Client ID and Client Secret.
  7. Copy the Organization ID.