# Integrating SailPoint with Productive

Productive is an all-in-one, cloud-based project and agency management platform for service-based businesses, agencies, and consultancies, enabling end-to-end project lifecycle management from sales to delivery and billing. This document provides instructions to configure a new direct connection to a Productive source. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Productive connector supports the following:

### Account Management

- Aggregate Account (Users)

### Entitlement Management

- Aggregate Groups (Roles)

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

1. Sign in to Productive with an administrator account.
2. Go to **Settings \> My Settings \> API Integrations**.
3. Select **Generate New Token**.
4. Select an access level:

   - **Read-only:** For data aggregation and reporting.
   - **Read/Write:** For provisioning or data modification use cases.
5. Select **Generate** to create the API token. After the token is generated, hover over its name to reveal and copy it.
6. Copy and securely store the following details for connector configuration:

   - Base URL
   - Organization ID
   - API token

   > **Note**
   >
   > - Tokens are linked to a specific user. If the user is deactivated, the token is automatically deactivated.
   > - Enabling or disabling two-factor authentication does not invalidate existing tokens.
   > - Changing your password invalidates your existing API tokens. If you update your password (**Settings \> Security**), generate a new access token afterward.

For more information about obtaining an access token, refer [API Access with Personal Access Tokens](<https://help.productive.io/en/articles/5440689-api-access-with-personal-access-tokens>) in the Productive documentation.

> [!NOTE]
>
> The linked document is not maintained by SailPoint and is subject to change without notice.

## Required Permissions

The default permission sets in Productive include:

- Admin: Full access, including settings and user management. Can generate tokens and fetch all user and group data.
- Manager, Profitability Manager, Coordinator, or Staff: Can be configured with varying access levels. By default:

  - If the role has access to People/User management and Teams in the UI, the user can generate a token and fetch those objects via the API.
  - API tokens inherit user permissions. A token behaves exactly like its user; if the user can view people and roles in Productive, the token can fetch them.
  - If a user lacks permission to view certain records in the UI, their token cannot fetch those records via the API.