# Integrating SailPoint with Zylo

Zylo is a SaaS management platform (SMP) that helps enterprises discover, manage, and govern their software-as-a-service applications, spend, and user access. The Zylo connector enables SailPoint to inventory the users known to a Zylo team so that access can be reviewed and governed centrally. This document provides instructions to configure a new direct connection to a Zylo source. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Zylo connector supports the following:

### Account Management

- Aggregate Users

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

- Ensure you have a Zylo Enterprise account with API access enabled.
- Ensure you have administrative access to the Zylo application. Per the Zylo developer documentation, generating a Company Token requires the `admin` permission in the Zylo application.
- Create a Company Token (`token_id` + `token_secret`) from the **Admin** page in the Zylo application. Copy the `token_secret` to a secure location when it is displayed at creation time. Zylo displays the `token_secret` only once.

For details on creating API keys and authentication, refer to the official Zylo documentation:

- API Keys: [API Keys](<https://developer.zylo.com/reference/api-key>)
- Authorization options: [Getting Started](<https://developer.zylo.com/reference/getting-started>)

## Required Permissions

- Company Tokens are created from the **Company Tokens** tab on the **Admin** page in the Zylo application. Per the Zylo documentation, the user generating the token must hold the `admin` permission within the Zylo application.
- A user without `admin` permission cannot create or modify Company Tokens.
- Enter the combined `{token_id}:{token_secret}` value in the **API Token** field. SailPoint stores it as an encrypted credential and includes it as `Authorization: Bearer {token_id}:{token_secret}` on every Zylo API call.
- For more information, refer to the following resources:

  - Zylo API Keys (token creation): [API Keys](<https://developer.zylo.com/reference/api-key>)
  - Zylo Authorization options: [Getting Started](<https://developer.zylo.com/reference/getting-started>)
  - Zylo API Permissions: [Permissions](<https://developer.zylo.com/reference/permissions>)
  - Get Team Users endpoint reference: [Get Team Users](<https://developer.zylo.com/reference/userscontroller_getusers>)

> [!NOTE]
>
> The linked document is not maintained by SailPoint and is subject to change without notice.