Skip to content

Integrating SailPoint with Liferay

Liferay is a digital experience platform that provides user management, role management, group management, and organizational hierarchy capabilities. It allows enterprises to centrally manage users, assign them to roles, groups, and organizations, and control access across Liferay sites and services. This document provides instructions to configure a new direct connection to a Liferay source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Liferay connector supports the following:

Account Management

  • Aggregate Users

Entitlement Management

  • Aggregate Roles, Organization, and User-Groups

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  • You have an active Liferay instance.
  • You have administrative access to the Control Panel.
  • You have access to OAuth 2 Administration.

  • You have created OAuth 2.0 client credentials with read access to Headless Admin User APIs.

    Note

    The connector uses Liferay Headless Admin User APIs to aggregate users and entitlements.

Create OAuth 2.0 client credentials

  1. Go to Control Panel > Security > OAuth 2 Administration.
  2. Click Add.
  3. Configure the following settings:
    • Client Profile: Headless Server
    • Allowed Authorization Type: Client Credentials

Required Permissions

  • Minimum required OAuth 2 scope (recommended):
    • When you create the OAuth 2 application, select Liferay.Headless.Admin.User.everything.read scope.
  • This scope provides read access to the following resources:
    • Users (/user-accounts)
    • Roles (/roles)
    • Organizations (/organizations)
    • User Groups (/user-groups)

For more information, refer to Creating an OAuth2 Application in the Liferay documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.