Integrating SailPoint with LINE WORKS

LINE WORKS (also known as NAVER WORKS) is a cloud-based enterprise collaboration platform that provides business messaging, email, calendar, file sharing, and organizational management capabilities, along with REST APIs for managing users, departments (org units), and groups for enterprise integration and identity management.. This document provides instructions to configure a new direct connection to LINE WORKS source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The LINE WORKS connector supports the following:

Account Management

Aggregate Users

Entitlement Management

Aggregate org units.

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Before you configure the connector, ensure the following:

A LINE WORKS account with Admin-level access.
Generate and store the OAuth Refresh Token using the LINE WORKS OAuth 2.0 process.

Follow the below steps to generate a refresh token.

Create an OAuth Application
1. Go to the Application Page.
2. Click on Setup new client application.
3. Fill in:
  1. Application name - Name of your app.
  2. Select the required OAuth Scope.
  3. Add Redirect URL - e.g. https://example.com/
  4. Mention the state.
4. Create and Save the Client ID and Client Secret.
Get Authorization Code
1. Paste this URL into a browser (single line, no line breaks):
  1. https://auth.worksmobile.com/oauth2/v2.0/authorize?client_id=YOUR_CLIENT_ID&redirect_uri=YOUR_REDIRECT_URI&response_type=code&scope={Mention the required scopes seperated by space}&state=xyz
2. Replace: YOUR_CLIENT_ID and YOUR_REDIRECT_URI with your Client ID and redirect URI.
3. After the user logs in, they'll be redirected to: https://your-redirect-uri.com/?code=AUTHORIZATION_CODE
4. Copy the code from the URL.
Exchange Code for Tokens
1. Send the POST request to LINE WORKS token endpoint:
  1. URL: https://auth.worksmobile.com/oauth2/v2.0/token
  2. Headers: Content-Type: application/x-www-form-urlencoded
  3. Body: client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET&code=AUTHORIZATION_CODE&redirect_uri=YOUR_REDIRECT_URI&grant_type=authorization_code
2. Save the generated refresh_token.

Important

Save the generated token securely. You need the token to authenticate SailPoint API requests.

Important

For more information, refer to NAVER WORKS API Documentation

Required Permissions

Note

The linked document is not maintained by SailPoint and is subject to change without notice.

While generating the OAuth client application following scope are required to perform the operations:

directory
directory.read
orgunit
orgunit.read
user
user.read