Skip to content

Integrating SailPoint with Scalr

Scalr is an enterprise-grade Infrastructure as Code (IaC) Platform designed to provide a centralized control plane for Terraform, OpenTofu, and Terragrunt workflows at scale. It offers a hierarchical management structure that enables IT and DevOps teams to standardize deployment logic, enforce fine-grained access control, and manage organizational resources across multiple cloud environments. This document provides instructions to configure a new direct connection to a Scalr source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Scalr connector supports the following:

Account Management

  • Aggregate Accounts

Entitlement Management

  • Aggregate Teams

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  1. Log in to the Scalr UI as an Account Admin.
  2. Select your avatar (bottom-left) and go to User Settings > Personal Access Tokens.
  3. Select Generate Token and provide a descriptive name.
  4. Copy the Token Secret immediately, it will not be shown again.

For more information about authentication, refer to the Scalr API authentication documentation.

Required Permissions

To integrate Scalr for identity governance, the API token must be generated at the Account Scope:

  • Service Account Integration: Use a Service Account for programmatic access to ensure the integration remains functional regardless of individual user status.
  • Account-Level Scope: The Service Account must be assigned a role at the Account level to provide visibility across all Environments and manage global IAM resources.
  • API Access: Service Accounts interact with the Scalr API via API Tokens (Bearer tokens) generated within the Service Account settings.
  • For more information about setting up Service Accounts, refer to the Scalr Service Accounts documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.