Tines

SailPoint Entro has partnered with Tines to deliver a streamlined experience - with dozens of actions of being natively supported in the Tines platform.

A list of all available actions, such as listing risks, adding risk comments, and updating the risk's owner, are available on the SailPoint Entro × Tines page.

SailPoint Entro Connect Flow

The SailPoint Entro connect flow is available here

Stories

You can view example stories here

Unifying SailPoint Entro Risks

SailPoint Entro deliveres its webhook a per risk change alert - when a risk is created, updated, an employee changes and so on, in such manner that the key where the data is changes - webhook.createdRisk, webhook.updatedRisk etc.

To unify the received alerts into a single workflow, we have created a Tines story that demonstrated how several different alerts can be used as if they came in the same way.

You can save the exported story below and import it into your Tines account.

Unify Webhoook Story

{
  "schema_version": 27,
  "standard_lib_version": 83,
  "action_runtime_version": 45,
  "name": "Unified API Risk",
  "description": null,
  "guid": "a525bfd10f7639349f5ad4db1876303a",
  "slug": "unified_api_risk",
  "agents": [
    {
      "type": "Agents::WebhookAgent",
      "name": "Webhook Action",
      "disabled": false,
      "description": null,
      "guid": "f2924c2c86147fe032101ac81d3c09df",
      "origin_story_identifier": "cloud:379ee80a6db0de2ca27d1d4b3fface46:283617a6ecfac009e2d2192f20f353fe",
      "options": {
        "path": "7ca6b5e9319c525c0b599ba606dc3a09",
        "secret": "62554c7da72c36a9b83fb9b7dc2cb906",
        "verbs": "get,post"
      },
      "reporting": {
        "time_saved_value": 0,
        "time_saved_unit": "minutes"
      },
      "monitoring": {
        "monitor_all_events": false,
        "monitor_failures": false,
        "monitor_no_events_emitted": null
      },
      "template": {
        "created_from_template_guid": null,
        "created_from_template_version": null,
        "template_tags": []
      },
      "width": null
    },
    {
      "type": "Agents::EventTransformationAgent",
      "name": "Unify Risk Payload",
      "disabled": false,
      "description": null,
      "guid": "ea1a27354f3d928ad0a5f4cd6f8e7c13",
      "origin_story_identifier": "cloud:379ee80a6db0de2ca27d1d4b3fface46:283617a6ecfac009e2d2192f20f353fe",
      "options": {
        "mode": "message_only",
        "loop": false,
        "payload": {
          "risk": "=JSON_PARSE(DEFAULT(webhook_action.body.updatedRisk, webhook_action.body.createdRiskRisk))"
        }
      },
      "reporting": {
        "time_saved_value": 0,
        "time_saved_unit": "minutes"
      },
      "monitoring": {
        "monitor_all_events": false,
        "monitor_failures": false,
        "monitor_no_events_emitted": null
      },
      "template": {
        "created_from_template_guid": null,
        "created_from_template_version": null,
        "template_tags": []
      },
      "width": null,
      "schedule": null
    },
    {
      "type": "Agents::EmailAgent",
      "name": "Send Email Action",
      "disabled": false,
      "description": null,
      "guid": "ea4c05412855bc0708029aca6f0f432e",
      "origin_story_identifier": "cloud:379ee80a6db0de2ca27d1d4b3fface46:283617a6ecfac009e2d2192f20f353fe",
      "options": {
        "recipients": "yehonatan.tsirolnik@entro.security",
        "reply_to": "<<unify_risk_payload.risk>>",
        "sender_name": "Yehonatan Tsirolnik",
        "subject": "Example email from Tines",
        "body": "A real email body could go here",
        "advanced_html": true
      },
      "reporting": {
        "time_saved_value": 0,
        "time_saved_unit": "minutes"
      },
      "monitoring": {
        "monitor_all_events": false,
        "monitor_failures": false,
        "monitor_no_events_emitted": null
      },
      "template": {
        "created_from_template_guid": null,
        "created_from_template_version": null,
        "template_tags": []
      },
      "width": null,
      "schedule": null
    }
  ],
  "diagram_notes": [
    {
      "content": "The \"Unify Risk Payload\"  will extract the risk data an will be available under - \nunify_risk_payload.risk\n\nE.g -\nunify_risk_payload.risk.guid\nunify_risk_payload.risk.severity",
      "position": [
        645,
        315
      ],
      "guid": "6f78e46b467edae5b2121a529b782186",
      "width": 270
    }
  ],
  "links": [
    {
      "source": 0,
      "receiver": 1
    },
    {
      "source": 1,
      "receiver": 2
    }
  ],
  "diagram_layout": "{\"ea1a27354f3d928ad0a5f4cd6f8e7c13\":[435,285],\"ea4c05412855bc0708029aca6f0f432e\":[435,405],\"f2924c2c86147fe032101ac81d3c09df\":[435,180]}",
  "story_library_metadata": {},
  "monitor_failures": false,
  "synchronous_webhooks_enabled": false,
  "integrations": [],
  "parent_only_send_to_story": false,
  "keep_events_for": 604800,
  "reporting_status": true,
  "send_to_story_enabled": false,
  "entry_agent_guid": null,
  "exit_agent_guids": [],
  "api_entry_action_guids": [],
  "api_exit_action_guids": [],
  "send_to_story_access": null,
  "send_to_story_access_source": 0,
  "send_to_story_skill_use_requires_confirmation": true,
  "pages": [],
  "tags": [],
  "time_saved_unit": "minutes",
  "time_saved_value": 0,
  "origin_story_identifier": "cloud:379ee80a6db0de2ca27d1d4b3fface46:a525bfd10f7639349f5ad4db1876303a",
  "recipients": [
    "yehonatan.tsirolnik@entro.security"
  ],
  "integration_product": null,
  "integration_vendor": null,
  "llm_product_instructions": "",
  "send_to_stories": [],
  "exported_at": "2025-07-16T14:01:01Z",
  "icon": ":magnet:"
}