Integrating SailPoint with Tenable.io
Tenable.io is a cloud-based vulnerability management platform that helps organizations identify, assess, and remediate security risks across their infrastructure. By integrating Tenable.io with SailPoint, organizations can govern user access to the Tenable.io platform, ensuring that only authorized personnel can access vulnerability management capabilities and that role assignments are visible for compliance and access reviews. This document provides instructions to configure a new direct connection to a Tenable.io source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Tenable.io connector supports the following:
Account Management
- Aggregate Users
Entitlement Management
- Aggregate Roles
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Ensure the following prerequisites are met before proceeding with the configuration:
- Ensure you have a Tenable.io account with access to generate API keys.
- Go to Settings > My Account > API Keys in the Tenable.io application.
- Generate a new API key and store it in a secure location.
Required Permissions
- Your API token must have sufficient permissions to read user and role data across the organization. At a minimum, the token must be able to access the Tenable.io Users and Roles APIs used for account and entitlement aggregation.