# Integrating SailPoint with LINE WORKS

**LINE WORKS** (also known as **NAVER WORKS**) is a cloud-based enterprise collaboration platform that provides business messaging, email, calendar, file sharing, and organizational management capabilities, along with REST APIs for managing users, departments (org units), and groups for enterprise integration and identity management.. This document provides instructions to configure a new direct connection to LINE WORKS source. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The LINE WORKS connector supports the following:

### Account Management

- Aggregate Users

### Entitlement Management

- Aggregate org units.

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## Prerequisites

Before you configure the connector, ensure the following:

- A LINE WORKS account with Admin-level access.
- Generate and store the OAuth Refresh Token using the LINE WORKS OAuth 2.0 process.

Follow the below steps to generate a refresh token.

- **Create an OAuth Application**

  1. Go to the Application Page.
  2. Click on Setup new client application.
  3. Fill in:

     1. Application name - Name of your app.
     2. Select the required OAuth Scope.
     3. Add Redirect URL - e.g. [https://example.com/](<https://example.com/>)
     4. Mention the state.
  4. Create and Save the Client ID and Client Secret.
- **Get Authorization Code**

  1. Paste this URL into a browser (single line, no line breaks):

     1. [https://auth.worksmobile.com/oauth2/v2.0/authorize?client\_id=YOUR\_CLIENT\_ID&amp;redirect\_uri=YOUR\_REDIRECT\_URI&amp;response\_type=code&amp;scope={Mention](<https://auth.worksmobile.com/oauth2/v2.0/authorize?client_id=YOUR_CLIENT_ID&amp;redirect_uri=YOUR_REDIRECT_URI&amp;response_type=code&amp;scope={Mention>) the required scopes seperated by space}&amp;state=xyz
  2. Replace: YOUR\_CLIENT\_ID and YOUR\_REDIRECT\_URI with your Client ID and redirect URI.
  3. After the user logs in, they'll be redirected to: [https://your-redirect-uri.com/?code=AUTHORIZATION\_CODE](<https://your-redirect-uri.com/?code=AUTHORIZATION_CODE>)
  4. Copy the code from the URL.
- **Exchange Code for Tokens**

  1. Send the POST request to LINE WORKS token endpoint:

     1. URL: [https://auth.worksmobile.com/oauth2/v2.0/token](<https://auth.worksmobile.com/oauth2/v2.0/token>)
     2. Headers: Content-Type: application/x-www-form-urlencoded
     3. Body: client\_id=YOUR\_CLIENT\_ID&amp;client\_secret=YOUR\_CLIENT\_SECRET&amp;code=AUTHORIZATION\_CODE&amp;redirect\_uri=YOUR\_REDIRECT\_URI&amp;grant\_type=authorization\_code
  2. Save the generated refresh\_token.

> [!IMPORTANT]
>
> Save the generated token securely. You need the token to authenticate SailPoint API requests.

> [!IMPORTANT]
>
> For more information, refer to [NAVER WORKS API Documentation](<https://developers.worksmobile.com/kr/docs/auth-oauth>)

## Required Permissions

> [!NOTE]
>
> The linked document is not maintained by SailPoint and is subject to change without notice.

While generating the OAuth client application following scope are required to perform the operations:

- directory
- directory.read
- orgunit
- orgunit.read
- user
- user.read