Skip to content

Integrating SailPoint with JFrog

JFrog is a software supply chain platform for artifact management, security scanning, and software distribution across DevOps workflows. This document covers how to configure a new direct connection between SailPoint and JFrog for Quick Compliance. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The JFrog connector supports the following:

Account Management

  • Aggregate Users

Entitlement Management

  • Aggregate Groups

Non-Human Identity Discovery

  • Aggregate Access Tokens
  • Gain visibility into Docker image layers stored in local JFrog Artifactory repositories to detect leaked secrets across the image layer file system

Refer to Dataset Management for more information.

Refer to Discovering Potential Non-Human Accounts for more information.

Note

Your organization must have a SailPoint Agentic Fabric license to discover non-human identities. Contact your Customer Success team for more information. For more information, refer to SailPoint Agentic Fabric.

Note

This connector is read-only. It supports test connection, account aggregation, entitlement aggregation, and dataset aggregation for Quick Compliance. Provisioning, de-provisioning, and write operations are not supported.

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Before you configure the JFrog connector, ensure the following requirements are met:

  1. Sign in to the JFrog Platform as an administrator.
  2. Generate an API token for the administrator account.
  3. Copy the token and store it securely.

  4. Record the following values for connector configuration:

    • Base URL - The JFrog Artifactory server root. For example, https://trialc03dqg.jfrog.io.
    • Username - The JFrog Platform username associated with the API token. Required when your tenant has a SailPoint Agentic Fabric license for non-human identity discovery.
    • API Token - The JFrog access or identity token in raw form, without a Bearer prefix.

For more information about creating API credentials, refer to Work with API Keys (Until Deprecated) and the Artifactory REST APIs documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.

Required Permissions

Only administrator users can generate user tokens for themselves in the JFrog Platform. Access follows the permissions assigned to that user. There is no dedicated read-only API role for standard user tokens.