Provisioning
The Zoom SaaS connector supports provisioning, allowing you to create and manage accounts and entitlements in Zoom directly from SailPoint.
Prerequisite: Your system is configured for provisioning.
When SailPoint provisions new accounts to the source, it uses the attributes on the Create Account page as instructions or a template for what to include in the account. This page is also referred to as the provisioning policy.
When new access is granted on a source where a user does not already have an account, SailPoint automatically includes account creation in the provisioning. This applies whether provisioning is started from an access request or from an automated role or lifecycle state assignment.
For direct-connect sources, SailPoint automatically creates the account from this configuration. If the source is not configured as a direct-connect source, SailPoint creates and assigns a provisioning task to the source owner and includes the values for the source owner to use in manually creating the account.
Important
This section describes the default Create Account configuration. SailPoint recommends that you work with Services to define a provisioning configuration specific to your company's needs. Be sure to verify large changes to the provisioning policy before implementation. Failure to do so might cause provisioning to fail.
Default Create Account Attributes
| Account Attribute | Generator | Description |
|---|---|---|
| action | Disable | This is the action to create an account. The default value is create. |
| Identity Attribute | The email address of the user. | |
| type | Disable | The license type for the user. The default type is basic. |
| first_name | Identity Attribute | The first name of the user. |
| last_name | Identity Attribute | The last name of the user. |
| password | Disable | The password of the user. Only applicable when the autoCreate option is selected. |
Limitations on Pending Users Update
This section provides important information on the limitations related to the Zoom managed system's APIs. There are the following related use cases:
-
Creation of pending User Account and Add/Remove Entitlement: In the user creation process, the Zoom managed system sends an email with a confirmation link to activate the Zoom account. The user can then set or change the password. The status of the created user is pending until the user verifies the email.
The pending user is created, however due to Zoom API behavior an entitlement is not assigned on the Zoom managed system. The Zoom API does not display an error, the Zoom connector has this entitlement as assigned until the next round of full aggregation.
The Zoom connector supports creation of active users with a custCreate action of the Zoom managed system. For more information, refer to the Zoom Developer documentation.
-
Attribute update on pending user: For the update of any attribute for a pending user, the request is successful, but is not reflected on the Zoom managed system.
-
Email update: The Zoom API displays the following error:
Domain name doesn't match. Please contact the Zoom Customer Support to set managed domains for your account.The error indicates that the email domain name does not match. The managed domain must be set to update the email ID. For more information, refer to the Zoom Developer documentation.
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.