Skip to content

Integrating SailPoint with Vanta

Vanta is a security and compliance automation platform that helps organizations achieve and maintain certifications such as SOC 2, ISO 27001, and HIPAA by continuously monitoring controls, evidence, and personnel access. The Vanta connector enables SailPoint to inventory the users known to a Vanta account so that access can be reviewed and governed centrally. This document provides instructions to configure a new direct connection to a Vanta source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The Vanta connector supports the following:

Account Management

  • Aggregate Accounts (Users)

Entitlement Management

  • Aggregate Groups

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  • Ensure you have a Vanta account with administrative access. Per the Vanta developer documentation, creating an API application requires admin access to the Vanta dashboard (Settings > Developer Console).
  • Create a Manage Vanta OAuth application. The connector authenticates using the OAuth 2.0 Client Credentials grant.
  • Use the Vanta API base URL: https://api.vanta.com/v1 (or https://api.vanta-gov.com/v1 for Vanta Government Cloud).
  • Use the Vanta OAuth token URL: https://api.vanta.com/oauth/token (or https://api.vanta-gov.com/oauth/token for Vanta Government Cloud).
  • For more information, refer to the following resources:

Required Permissions

  1. Create a Manage Vanta application from Settings > Developer Console in the Vanta dashboard.
  2. Per the Vanta documentation, ensure you have a Vanta account with admin access. Vanta auto-generates the OAuth client_id and generates the client_secret on demand.
  3. SailPoint stores the client_secret as an encrypted credential and uses the Client Credentials grant against the token URL to mint and refresh the access token automatically.
  4. Note that Vanta access tokens expire after one hour and only one active token per application is permitted.
  5. The connector reads users from GET /v1/users. A read-only scope is sufficient; per the Vanta quickstart, the minimum scope for read calls is vanta-api.all:read.
  6. Vanta does not provide fine grained scoped service account support to integrate with their system.

For more information about required permissions, refer to the following resources:

Note

The linked document is not maintained by SailPoint and is subject to change without notice.