Integrating SailPoint with Losant
Losant is an Enterprise IoT platform that helps organizations build, deploy, and manage connected device solutions. It provides tools for managing applications, devices, workflows, dashboards, and organization members, along with fine-grained API access control. This document provides instructions to configure a new direct connection to a Losant source.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Losant connector supports the following:
Account Management
- Aggregate Accounts
Entitlement Management
- Aggregate Groups
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Ensure the following prerequisites are met before proceeding with the configuration:
- You have Owner or Admin permissions in your Losant organization.
- You have generated and stored an API access token using the Losant API token management process.
Create an API Token
Losant supports two token types - Organization (User) tokens and Application tokens. For account and entitlement management across an organization, an organization-level token with user-management scopes is recommended.
- Sign in to your Losant account.
- Go to your Organization.
- Select API Tokens from the organization subnavigation. For application-scoped tokens, select API Tokens from the application menu instead.
- Select Add Application Token (or the equivalent Add Token action for your token type).
- Fill in the following:
- Name - Name of the token
- Description - Purpose of the API token
- Expiration Date - Never expires by default, or set an expiration date
- Permissions - Select the token scope (see Required Permissions below)
- Select Create Application Token.
- Copy and save the token shown after creation. Losant does not store tokens, and they cannot be recovered or regenerated if lost.
Required Permissions
Losant uses a centralized API base domain. Ensure connectivity to https://api.losant.com.
The token must have administrative privileges to manage organization members and roles. By default, a token with All permissions or the relevant Custom scopes inherits access to manage the following:
- User Management - Access to organization member details (
all.User/org.*scopes) - Group Management - Access to created groups within the parent group (,
sailpoint.connectivity,sailpoint.ARM)
Note
If you use a token scoped to Read only, the connector will only be able to read data, and write operations (like provisioning, updates, or entitlement assignments) will not be allowed.
For more information about API authentication, refer to the Losant REST API documentation.
Support
For any help with the Losant API, refer to the Losant REST API documentation or the Losant Forums.
Note
The linked document is not maintained by SailPoint and is subject to change without notice.