Skip to content

Integrating SailPoint with SonarQube Cloud

SonarQube Cloud is a fully managed, cloud-based Software-as-a-Service (SaaS) platform from SonarSource. It provides automated Static Application Security Testing (SAST) and code quality analysis, helping development teams catch issues before code is merged into production. This document provides instructions to configure a new direct connection to a SonarQube Cloud source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The SonarQube Cloud connector supports the following:

Account Management

  • Aggregate Users

Entitlement Management

  • Aggregate Groups

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  • SonarQube Cloud access token. To obtain the access token, complete the following steps:
    1. Go to My account > Access Tokens.
    2. Generate a token.
  • SonarQube Cloud organization key. To obtain the organization key, complete the following steps:
    1. Open your organization.
    2. Go to Administration > Organization settings.
    3. Copy the key.
  • For more information about managing personal access tokens, refer to the SonarQube Cloud Managing Tokens documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.

Required Permissions

  • The user must have a SonarQube Cloud account.
  • The user must be an Organization owner to manage users and groups.