Integrating SailPoint with Snapchat Ads

Snapchat Ads is a platform for creating, managing, and measuring advertising on Snapchat. Organizations use it to run campaigns, manage ad accounts, and collaborate with team members under a Snapchat Business organization. This document provides instructions to configure a new direct connection to a Snapchat Ads source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Supported Features

The Snapchat Ads connector supports the following:

Account Management

• Aggregate Active Users

Entitlement Management

• Aggregate Roles

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

• An Organization Admin in Snap Business Manager can access the OAuth app dashboard where Marketing API app credentials are created and managed. Coordinate with your Snapchat Business organization administrator if you do not have this access.
• The connector is configured for OAuth 2.0 using a refresh token grant. You must complete the Snapchat authorization flow to obtain a refresh token, and store the client ID, client secret, and refresh token securely for SailPoint.
• Obtain the organization ID for the Snapchat Business organization whose members and roles you will aggregate.
• Use the Marketing API base URL and token endpoint expected by Snap (defaults in the connector: https://adsapi.snapchat.com/v1 and https://accounts.snapchat.com/login/oauth2/access_token) unless your environment documentation specifies otherwise.
• For OAuth app setup, credential generation, and token refresh, refer to Snap’s Marketing API authentication guide, Authentication | Snap for Developers.
  • Refer the Full Web Flow Example section for a step-by-step guide to generate a refresh token.
  • For creating the OAuth app in Business Manager, refer Apply for API Access.
  • To obtain an organization ID, see Snapchat Business Help.

Required Permissions

Service account/API credentials

• Register an OAuth app in Snap Business Manager (Business Details/app dashboard). Per Snap’s documentation, you must be an Organization Admin to see the app dashboard. The app yields a client ID and client secret (the secret is shown only once at creation).
• A user must authorize the app through the Snapchat OAuth web flow. The resulting authorization code is exchanged for an access token and refresh token. The connector uses the refresh token with the client ID and client secret to obtain new access tokens.
• Typically, an organization administrator or a delegated admin with access to Business Manager and the OAuth app settings.

Scope needed for connector operations

• For read/write access to Snapchat Marketing APIs, Snap documents the scope snapchat-marketing-api. The access token reflects the authorizing user’s permissions when calling the API.
• Listing organization members and role assignments requires API access and organization-level permissions consistent with Snap’s Business and Ads roles. Accounts without sufficient access may receive authorization or visibility errors when aggregating users or roles.

Relevant permissions

• OAuth scope: snapchat-marketing-api (and additional scopes only if your integration explicitly requires them, for example, Conversions or Public Profile APIs).
• Business roles: API behavior is tied to the authorizing user’s roles in Snapchat Business.
• Refer to the official Snapchat Ads and Marketing API documentation for authentication and permissions if your deployment uses custom policies or additional APIs.
• For more information, refer to the following resources:
  • Roles and permissions
  • Snapchat Business Help