# Integrating SailPoint with Scalr

Scalr is an enterprise-grade Infrastructure as Code (IaC) Platform designed to provide a centralized control plane for Terraform, OpenTofu, and Terragrunt workflows at scale. It offers a hierarchical management structure that enables IT and DevOps teams to standardize deployment logic, enforce fine-grained access control, and manage organizational resources across multiple cloud environments. This document provides instructions to configure a new direct connection to a Scalr source. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Scalr connector supports the following:

### Account Management

- Aggregate Accounts

### Entitlement Management

- Aggregate Teams

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

1. Log in to the Scalr UI as an Account Admin.
2. Select your avatar (bottom-left) and go to **User Settings \> Personal Access Tokens**.
3. Select **Generate Token** and provide a descriptive name.
4. Copy the **Token Secret** immediately, it will not be shown again.

For more information about authentication, refer to the [Scalr API authentication documentation](<https://docs.scalr.io/reference/overview-1#authentification>).

## Required Permissions

To integrate Scalr for identity governance, the API token must be generated at the **Account Scope**:

- **Service Account Integration**: Use a **Service Account** for programmatic access to ensure the integration remains functional regardless of individual user status.
- **Account-Level Scope**: The Service Account must be assigned a role at the **Account level** to provide visibility across all Environments and manage global IAM resources.
- **API Access**: Service Accounts interact with the Scalr API via **API Tokens** (Bearer tokens) generated within the Service Account settings.
- For more information about setting up Service Accounts, refer to the [Scalr Service Accounts documentation](<https://docs.scalr.io/docs/identity-and-access-management#service-accounts>).

> [!NOTE]
>
> The linked document is not maintained by SailPoint and is subject to change without notice.