Skip to content

Integrating SailPoint with Terraform

Terraform Cloud, developed by HashiCorp, is an infrastructure automation platform that allows teams to provision and manage cloud and on-premise infrastructure through Infrastructure-as-Code (IaC). It centralizes state management, access control, and policy enforcement for Terraform operations.

This document provides instructions to configure a direct connection between SailPoint and Terraform Cloud.

For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Terraform connector supports the following:

Account Management

  • Aggregate active users

Entitlement Management

  • Aggregate Teams

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  • Ensure you have an active Terraform Cloud organization.
  • Obtain an API token with sufficient privileges to list users and teams.

Refer to the Terraform Cloud API Documentation for instructions on generating and managing tokens. SailPoint recommends that you use an organization-level token for this connector.

Required Permissions

  • The Terraform connector supports API Token-based authentication.

  • To connect SailPoint with Terraform Cloud, you need a User or Organization API Token with read access to users and teams within the organization. Organization API Tokens are not tied to a single user’s lifecycle.

    Note

    SailPoint recommends that you configure the token with no expiration to prevent connection interruptions.

  • Alternatively, you can create a dedicated automation user and assign only the minimum required team permissions.

  • Terraform Cloud does not offer traditional service accounts with independent identities and custom-scoped permissions.

    Resource Links

    Note

    The linked document is not maintained by SailPoint and is subject to change without notice.