Integrating SailPoint with TeamCity
TeamCity is a continuous integration and continuous delivery (CI/CD) platform from JetBrains. Use the TeamCity connector to aggregate users as accounts, groups and roles as entitlements, and access tokens and SSH keys as non-human identities.
The connector is read-only and does not provision access.
Note
To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.
Supported Features
| Feature | Description |
|---|---|
| Test connection | Validates the TeamCity REST API URL and authenticates with the configured username and password. |
| Account aggregation | Aggregates TeamCity users as SailPoint accounts. |
| Account read | Reads a TeamCity user by ID. |
| Entitlement aggregation | Aggregates TeamCity groups and roles as entitlements. |
| Entitlement read | Reads a TeamCity group or role by its identifier. |
| Dataset aggregation | Aggregates TeamCity access tokens and SSH keys as credentials. |
Non-Human Identity Discovery
- Aggregate TeamCity access tokens and SSH keys
Refer to Dataset Management for more information.
Refer to Discovering Potential Non-Human Accounts for more information.
Supported Version
The connector targets the TeamCity REST API at {baseUrl}/app/rest.
- TeamCity Cloud - Hosted accounts, such as
https://your-account.teamcity.com.
The connector is compatible with TeamCity 2021.1 and later, which supports the REST API v2 format used by this connector.
Prerequisites
Preparing TeamCity
Complete these tasks before you configure the TeamCity source.
- Ensure your TeamCity instance is available to SailPoint over HTTPS.
- Sign in to TeamCity as a system administrator.
- Go to Administration > Users.
- Select Create user account.
- Enter a username and strong password for a dedicated SailPoint service account.
- Assign the System Administrator role to the service account at the project root level.
- Store the username and password in your secrets tooling.
Important
The connector uses HTTP Basic authentication. The service account must be able to read users, groups, roles, access tokens, and SSH keys across the TeamCity instance.
Required Permissions
An account with the System Administrator role satisfies all permissions required by this connector, including reading users, groups, roles, access tokens, and project SSH keys.
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.