Skip to content

Integrating SailPoint with SOTI MobiControl

SOTI MobiControl is an enterprise mobility management platform that helps organizations deploy, manage, monitor, and secure mobile devices and applications across their workforce. The SOTI MobiControl connector is a read-only integration that enables SailPoint to aggregate local and SSO user accounts and security role entitlements for identity governance and quick compliance use cases. This document provides the instructions required to configure a new direct connection between SailPoint and SOTI MobiControl. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The SOTI MobiControl connector supports the following:

Account Management

  • Aggregate Users (local and SSO)

Entitlement Management

  • Aggregate Security Roles

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Pagination

The SOTI MobiControl source uses skip and take query parameters for offset-based pagination. The connector starts at skip=0 (0-indexed) and increments skip after each request. Aggregation continues until the API returns an empty array, at which point aggregation terminates.

How Pagination Works for This Operation

  • Initial Page Offset: 0 - starting point for the first request (SOTI MobiControl offsets are 0-indexed via the skip query parameter).
  • Page Size: 100 - number of records requested per page, passed via the take query parameter.

Paging steps:

  • $limit$ = 100
  • TERMINATE_IF $RECORDS_COUNT$ = 0
  • $offset$ = $offset$ + $limit$
  • $endpoint.fullUrl$ = $application.baseUrl$ + "/security/principal/users?skip=" + $offset$ + "&take=" + $limit$

Prerequisites

Before configuring the SOTI MobiControl connector, ensure the following requirements are met:

  1. Know your MobiControl tenant hostname. For example, if your dashboard URL is https://acme.mobicontrol.cloud, your tenant hostname is acme.
  2. Have an API client ID and client secret.
  3. Have a MobiControl administrator account (not an IdP user) with credentials for the connector.

Create an API Client

To create an API client:

  1. Sign in to the MobiControl dashboard.
  2. Go to Global Settings.
  3. On the Services tab, select API Client.
  4. Create a new API client with grant_type set to password.
  5. Copy and securely store the Client ID and Client Secret.

Note

  • The token request requires Basic authentication using the client ID and client secret.
  • API documentation is tenant-specific and available at https://<tenant>.mobicontrol.cloud/MobiControl/WebConsole/docs.

Required Permissions

SOTI MobiControl API access is tenant-specific. There is no default Base URL. The API client must have access to the following endpoints:

Endpoint Description
/security/principal/users Lists user accounts in the tenant.
/security/principal/users/{referenceId}/roles Lists security roles assigned to a user.
/security/principal/roles Lists security roles defined in the tenant.

Membership in the Administrator group satisfies all required permissions for this connector. For more detailed information on SOTI MobiControl API authentication, refer to the tenant-specific API documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.