Integrating SailPoint with Scalefusion
Scalefusion is a cloud Unified Endpoint Management (UEM) platform used to enroll, secure, and manage devices, and to administer the users who manage them through the Scalefusion Dashboard. Administrators are managed from the Admins and Roles section of the Scalefusion Dashboard. This document provides the instructions required to configure a new direct connection between SailPoint and Scalefusion for Quick Compliance use cases. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Scalefusion connector supports the following:
Account Management
- Aggregate Accounts (Administrators)
Entitlement Management
- Aggregate Entitlements (Administrator Roles)
Note
This connector is read-only. It supports account aggregation and entitlement aggregation for Quick Compliance. Provisioning, de-provisioning, and write operations are not supported in this release.
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Before configuring the Scalefusion connector, generate a Developer API Key in Scalefusion. The signed-in administrator must have permission to view the Developer API section.
- Sign in to the Scalefusion Dashboard.
- In the left sidebar, go to Integrations.
- Open the Developer API section.
- Select Generate API Key. The key is displayed on screen.
- Copy the API Key and store it securely. Treat this value as a sensitive credential.
- Identify the Base URL for your Scalefusion instance region, as listed in the table below.
Regional Base URLs
Use the value that matches the Scalefusion instance your organization is hosted on.
| Instance | Base URL to configure |
|---|---|
| Global | https://api.scalefusion.com/api/v1 |
| India | https://api-in.scalefusion.com/api/v1 |
| US | https://endpointlockdown.com/api/v1 |
| MEA | https://api-mea.scalefusion.com/api/v1 |
Record the following values for SailPoint configuration:
- Base URL
- API Token
Note
Store the API Key securely. If the key is compromised it can be regenerated from the same screen, which automatically disables the old key. Any SailPoint source configured with the previous key must be updated after regeneration.
Required Permissions
Role-Based Access
This connector authenticates with a Scalefusion Developer API Key. The data available to SailPoint is determined by the Scalefusion account that generated the key. Visibility of the Developer API section is itself controlled per role under Admins and Roles, so the generating account must have that permission enabled.
Scalefusion supports two categories of roles, and this connector aggregates all role types, both built-in system roles and any custom roles defined in the account.
System Roles are pre-defined by Scalefusion and can be assigned when creating an administrator:
| Role Name | Description | Permissions |
|---|---|---|
| Group Admin | Has access to the devices and other features only for the device groups assigned to them | Read Only, or Read and Write |
| Device Admin | Has access to all the devices present in the account | Read Only, or Read and Write |
| Co-Account Manager | Has access to all features similar to the owner | All Access |
| Approver/Checker | Can approve or reject the actions initiated by other admins | Approval actions |
Custom Roles can be created under Admins and Roles > Roles & Permissions > Custom Roles. A custom role is scoped either to All Devices or to Device Groups, and each feature can be set to Visibility, All Access, or Read Only. Custom roles are aggregated as entitlements alongside the system roles.
Configuring the Admins and Roles section requires an administrator in the role of Owner or Co-Account Manager.
Recommendation: Generate the Developer API Key from an Owner or Co-Account Manager account so that the key is not affected by later permission changes to a narrower role, and so that Developer API visibility remains enabled.
Rate Limits and Terms of Use
Scalefusion rate limits each API Key to 1000 requests per day and 5 requests per minute. Requests beyond these limits are rejected, so aggregation schedules must stay within them.
Key Implementation Notes
- Authentication uses a Developer API Key generated from Integrations > Developer API. Regenerating a key immediately disables the previous one.
- The Base URL is region specific. Confirm the correct regional value before configuring the source.
- Accounts use Id as the identity attribute, Name as the display attribute, and Email as the correlation attribute.
- Role entitlements include Scalefusion system roles (Group Admin, Device Admin, Co-Account Manager, Approver/Checker) and any custom roles created in the account. All role types are aggregated.
- This read-only release supports Quick Compliance only. Devices, device profiles, and device groups are not aggregated or provisioned.
References
For more information, refer to the following resources:
Note
The linked document is not maintained by SailPoint and is subject to change without notice.