Skip to content

Integrating SailPoint with Ory

Ory is an open-source identity and access management platform that provides identity, authentication, authorization, and user management features. It enables businesses to manage identities, enforce authentication flows, integrate multi-tenancy, and configure security policies.

This document provides instructions to configure a new direct connection between SailPoint and Ory. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Ory connector supports the following:

Account Management

  • Aggregate Accounts

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  • An Ory Cloud project created and accessible via the Ory console.

  • In the Ory console, access to Project Settings > API Keys to generate a personal API key.

    Note

    The Project API Key must be generated by an Ory Project Administrator from the Ory console.

  • The Project Slug (automatically generated by Ory when the project is created) uniquely identifies your Ory Cloud project. You can find it in the Ory Console > Project Settings > Overview.

    Note

    To align with the SailPoint account schema you need to go to your Ory console, go to User Management > Identity Schema and then in User Management > Identity Schema select Profile with email, name, newsletter opt-in .