Integrating SailPoint with Vendasta
Vendasta is a white-label digital marketing, CRM, and local-presence platform used by agencies, franchises, and multi-location brands. Partners run their business from Partner Center: they onboard client companies, manage business locations, sell and deliver products such as CRM, listings, reviews, and related marketplace apps, and control who on their team and at those businesses can use each product. This document provides the instructions required to configure a new direct connection between SailPoint and Vendasta. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
The Vendasta connector supports the following:
Account Management
- Aggregate Users
Note
App-feature access is captured during Account aggregation. It is embedded on each user as the platformAccess attribute (relationships.platformAccess.data[*].id, resource type appFeatures). A separate entitlement aggregation is not required.
Important
Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
- Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
- Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.
These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.
Prerequisites
Before you configure the Vendasta connector, ensure the following requirements are met:
- Sign in to Vendasta.
- Copy the Partner ID. After you sign in, it is shown at the top of the left navigation bar (a short partner code, for example
A4DH). - Generate an access token from the Vendasta developer documentation (Generate token):
- Select Generate Token in the top navigation. The dialog issues a short-lived OAuth2 bearer token using the PKCE flow.
- Scopes - add
user.listanduser.admin. These allow the token to read the Platform Users API that Test Connection and account aggregation call. - Environment - select Prod.
- Partner ID - enter your partner code (for example
A4DH). This field is required. - Select Generate Token, then copy the token.
- Token lifetime: This OAuth2 bearer token is valid for about 30 minutes. When it expires, Test Connection and aggregation fail with 401. Generate a new token the same way and paste it into API Token before you run another job. There is no refresh token on this path; you must replace the token each time it expires.
- Copy and securely store the following details, which are required during connector configuration:
- Base URL
- API Token
- PartnerId
Note
- The Vendasta connector authenticates with an OAuth2 Bearer access token. You generate that token in the Vendasta Developer Portal (Generate Token), then paste it into API Token. The connector sends it on every call as
Authorization: Bearer <token>. - Generate the token for Prod, enter your Partner ID, and include the scopes
user.listanduser.admin. The token is short-lived (about 30 minutes). When it expires, generate a new one the same way and paste it into the source. There is no refresh token on this path. - All API requests must use HTTPS; unencrypted HTTP calls are not supported and will fail.
- Credentials should be stored securely and treated like a password.
For more detailed information on Vendasta API authentication, refer to the official Vendasta documentation.
Note
The linked document is not maintained by SailPoint and is subject to change without notice.
Required Permissions
The connector authenticates with an OAuth2 access token. That token must include:
- user.list - List Platform users for the partner. Required for Test Connection and account aggregation.
- user.admin - Read user details, including
platformAccess(app-feature entitlements).