Skip to content

Integrating SailPoint with ZenML Cloud

ZenML Cloud is a managed MLOps platform. Teams use it to run pipelines, manage stacks, and control who can access an organization, its workspaces, and its projects. Access is granted through organization, workspace, and project roles. This document covers how to configure a new direct connection between SailPoint and ZenML Cloud for Quick Compliance. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The ZenML Cloud connector supports the following:

Account Management

  • Aggregate Users

Entitlement Management

  • Aggregate Roles

Non-Human Identity Discovery

  • Aggregate Service Accounts

Note

This connector is read-only. It supports test connection, account aggregation, entitlement aggregation, and dataset aggregation for Quick Compliance. Provisioning, de-provisioning, and write operations are not supported. Service accounts are aggregated separately from human users and are not included in user account aggregation.

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Before you configure the ZenML Cloud connector, ensure the following requirements are met:

  1. Sign in to ZenML Cloud as an organization administrator.
  2. Create an API key. ZenML shows the key only once. Copy the key and store the secret securely.
  3. Copy the organization ID from the ZenML Cloud URL or from the organization settings. The organization ID is a UUID.

  4. Record the following values for connector configuration:

    • Base URL
    • Organization ID
    • API Key

For more information, refer to the ZenML Cloud API reference.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.

Required Permissions

The connector authenticates with a ZenML Pro service account API key. The service account must have the Organization Admin role for the organization being aggregated. A service account with only the Organization Member role cannot be used because that role has limited organization access and might not be able to list every required resource.

With an Organization Admin API key, the connector can:

  • List organization members, excluding service accounts from human account aggregation.
  • List organization roles.
  • List all service accounts in the organization.
  • List the API keys belonging to each service account.