Integrating SailPoint with Juniper Mist
Juniper Mist is a cloud-managed networking platform for Wi-Fi, wired, and WAN. Organisations manage their network from the Juniper Mist portal. The people who sign in to that portal are administrators. This document covers how to configure a new direct connection between SailPoint and Juniper Mist for Quick Compliance. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Juniper Mist connector supports the following:
Account Management
- Aggregate Account (Administrators)
Entitlement Management
- Aggregate Sites
- Aggregate Site groups
Note
This connector is read-only. It supports test connection, account aggregation, and entitlement aggregation for Quick Compliance. Provisioning, de-provisioning, and write operations are not supported.
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Complete these steps in Juniper Mist before you add the source in SailPoint.
Identify Your Region and Base URL
Juniper Mist organisations live in a specific cloud region. The API host must match that region, or authentication fails with an invalid token. Sign in to the Juniper Mist portal and look at the address bar. Replace manage with api, and use https://. For example, you sign in at https://manage.gc4.mist.com/admin/?org_id=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
- Base URL
- Organisation ID: the UUID after
org_id=
| Region | Portal | Base URL |
|---|---|---|
| Global 01 | manage.mist.com | https://api.mist.com |
| Global 02 | manage.gc1.mist.com | https://api.gc1.mist.com |
| Global 03 | manage.ac2.mist.com | https://api.ac2.mist.com |
| Global 04 | manage.gc2.mist.com | https://api.gc2.mist.com |
| Global 05 | manage.gc4.mist.com | https://api.gc4.mist.com |
| EMEA 01 | manage.eu.mist.com | https://api.eu.mist.com |
| EMEA 02 | manage.gc3.mist.com | https://api.gc3.mist.com |
| EMEA 03 | manage.ac6.mist.com | https://api.ac6.mist.com |
| EMEA 04 | manage.gc6.mist.com | https://api.gc6.mist.com |
| APAC 01 | manage.ac5.mist.com | https://api.ac5.mist.com |
| APAC 02 | manage.gc5.mist.com | https://api.gc5.mist.com |
| APAC 03 | manage.gc7.mist.com | https://api.gc7.mist.com |
Create an API Token
Juniper Mist authenticates with a static API token. There is no OAuth login from SailPoint.
- Sign in to the portal for your organisation's region.
- Create a token. Prefer an organisation API token (Organisation > Admin > Settings > API Token) so aggregation is not tied to one person's account. You can also create a user API token from your account menu.
- Copy the token immediately. Juniper Mist shows the full value only at creation.
The token is sent on every request as Authorization: Token <API Token>.
Record These Values for SailPoint
- Base URL (regional API host, including
https://) - Organisation ID (UUID)
- API Token
Required Permissions
A Juniper Mist administrator who can create an organisation or user API token for the organisation you want to aggregate must create the token. SailPoint sends the API token on each request. There is no token refresh. If the token is revoked, expired, or created in a different region than the Base URL, test connection and aggregation fail until a valid token for that region is supplied. Juniper Mist allows 5000 API calls per hour per token. For more information about Juniper Mist, refer to the following:
Note
The linked document is not maintained by SailPoint and is subject to change without notice.