HashiCorp Vault Troubleshooting and Validation

This section provides validation steps and troubleshooting procedures for the HashiCorp Vault integration.

---

Validation Steps

1. Verify connection in the dashboard

   In the SailPoint Entro Dashboard, go to Management > Accounts & Integrations > HashiCorp Vault and confirm the connection status displays Verified.

2. Check last synchronization

   Ensure that Last Synchronization Timestamp is recent.

3. Confirm discovered secrets

   Check for discovered secret metadata under Vault Management > Vaulted Secrets.

---

Common Issues and Resolutions

Issue	Possible Cause	Resolution
“Permission denied”	Insufficient ACL permissions	Verify ACL includes list, read, and update capabilities
Token expired	Token TTL reached	Renew or recreate token with renewable=1
Connection timeout	Network restrictions	Ensure Vault API is reachable via HTTPS (port 8200)
Missing findings	KV engine access missing	Add KV2 metadata permissions per refined ACL

---

Advanced Diagnostics

• Review SailPoint Entro Worker logs for Vault sync events and response codes

• Check Vault audit logs for token activity or permission denials

• Ensure Vault token policies match SailPoint Entro’s ACL configuration

---