# Integrating SailPoint with Juniper Mist

Juniper Mist is a cloud-managed networking platform for Wi-Fi, wired, and WAN. Organisations manage their network from the Juniper Mist portal. The people who sign in to that portal are administrators. This document covers how to configure a new direct connection between SailPoint and Juniper Mist for Quick Compliance. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Juniper Mist connector supports the following:

### Account Management

- Aggregate Account (Administrators)

### Entitlement Management

- Aggregate Sites
- Aggregate Site groups

> [!NOTE]
>
> This connector is read-only. It supports test connection, account aggregation, and entitlement aggregation for Quick Compliance. Provisioning, de-provisioning, and write operations are not supported.

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## Prerequisites

Complete these steps in Juniper Mist before you add the source in SailPoint.

### Identify Your Region and Base URL

Juniper Mist organisations live in a specific cloud region. The API host must match that region, or authentication fails with an invalid token. Sign in to the Juniper Mist portal and look at the address bar. Replace `manage` with `api`, and use `https://`. For example, you sign in at `https://manage.gc4.mist.com/admin/?org_id=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx`

- **Base URL**
- **Organisation ID**: the UUID after `org_id=`

| Region | Portal | Base URL |
| --- | --- | --- |
| Global 01 | [manage.mist.com](<https://manage.mist.com>) | `https://api.mist.com` |
| Global 02 | [manage.gc1.mist.com](<https://manage.gc1.mist.com>) | `https://api.gc1.mist.com` |
| Global 03 | [manage.ac2.mist.com](<https://manage.ac2.mist.com>) | `https://api.ac2.mist.com` |
| Global 04 | [manage.gc2.mist.com](<https://manage.gc2.mist.com>) | `https://api.gc2.mist.com` |
| Global 05 | [manage.gc4.mist.com](<https://manage.gc4.mist.com>) | `https://api.gc4.mist.com` |
| EMEA 01 | [manage.eu.mist.com](<https://manage.eu.mist.com>) | `https://api.eu.mist.com` |
| EMEA 02 | [manage.gc3.mist.com](<https://manage.gc3.mist.com>) | `https://api.gc3.mist.com` |
| EMEA 03 | [manage.ac6.mist.com](<https://manage.ac6.mist.com>) | `https://api.ac6.mist.com` |
| EMEA 04 | [manage.gc6.mist.com](<https://manage.gc6.mist.com>) | `https://api.gc6.mist.com` |
| APAC 01 | [manage.ac5.mist.com](<https://manage.ac5.mist.com>) | `https://api.ac5.mist.com` |
| APAC 02 | [manage.gc5.mist.com](<https://manage.gc5.mist.com>) | `https://api.gc5.mist.com` |
| APAC 03 | [manage.gc7.mist.com](<https://manage.gc7.mist.com>) | `https://api.gc7.mist.com` |

### Create an API Token

Juniper Mist authenticates with a static API token. There is no OAuth login from SailPoint.

1. Sign in to the portal for your organisation's region.
2. Create a token. Prefer an organisation API token (**Organisation \> Admin \> Settings \> API Token**) so aggregation is not tied to one person's account. You can also create a user API token from your account menu.
3. Copy the token immediately. Juniper Mist shows the full value only at creation.

The token is sent on every request as `Authorization: Token <API Token>`.

### Record These Values for SailPoint

- **Base URL** (regional API host, including `https://`)
- **Organisation ID** (UUID)
- **API Token**

## Required Permissions

A Juniper Mist administrator who can create an organisation or user API token for the organisation you want to aggregate must create the token. SailPoint sends the API token on each request. There is no token refresh. If the token is revoked, expired, or created in a different region than the Base URL, test connection and aggregation fail until a valid token for that region is supplied. Juniper Mist allows 5000 API calls per hour per token. For more information about Juniper Mist, refer to the following:

- [Juniper Mist website](<https://www.mist.com/>)
- [Mist API introduction](<https://www.mist.com/documentation/mist-api-introduction/>)
- [API Endpoints and Global Regions](<https://www.juniper.net/documentation/us/en/software/mist/automation-integration/topics/topic-map/api-endpoint-url-global-regions.html>)
- [RESTful API Overview](<https://www.juniper.net/documentation/us/en/software/mist/automation-integration/topics/concept/restful-api-overview.html>)

> [!NOTE]
>
> The linked document is not maintained by SailPoint and is subject to change without notice.