Workato
Workato is a cloud-based, low-code/no-code platform for enterprise automation and integration
You can integrate SailPoint Entro with the Workato platform by utilizing Workato's Webhook App Connector and SailPoint Entro's Alerts and Webhooks configuration options.
-
Create a new recipe by choosing the Trigger from a webhook option from the list of recipe starting points.
This creates a new recipe with the New event via HTTP webhook trigger.
-
Click Start guided setup to start the wizard.
-
Provide a meaningful name in the Event name field. This name is used to generate a unique webhook address.
Note
To prevent your recipe from receiving webhook events from multiple sources, the event name must be unique across all your webhook recipes.
Generate a unique webhook address

-
Click Next to start listening for webhook events from your app.
-
Click Copy to retrieve the unique webhook address. You'll use this URL to register the webhook in your app.

-
Head over to SailPoint Entro's Alert settings, Settings > Alerts
- Click on + Add new alert rule
-
Select your desired alert threshold with a small enough sample size and click Next

-
Select to Send a Webhook, paste in your Workato supplied URL
-
Check Send a message about x existing risks that meet these conditions and select Save

Note
Sending these sampled messages will not trigger a workflow as long as the webhook is not connected to any action
You should see the alerts reaching your Workato Webhook setup wizard.
-
Click on Setup webhook

You now should be able to see the JSON schema configured in the Workato platform

Now you will be able to act on the received webhook data

Example JSON Schema
[
{
"properties": [
{
"control_type": "number",
"label": "ID",
"parse_output": "float_conversion",
"type": "number",
"name": "id"
},
{
"control_type": "text",
"label": "Guid",
"type": "string",
"name": "guid"
},
{
"control_type": "number",
"label": "Customer ID",
"parse_output": "float_conversion",
"type": "number",
"name": "customerId"
},
{
"control_type": "text",
"label": "Severity",
"type": "string",
"name": "severity"
},
{
"control_type": "text",
"label": "Owner",
"type": "string",
"name": "owner"
},
{
"control_type": "number",
"label": "Detection time",
"parse_output": "float_conversion",
"type": "number",
"name": "detectionTime"
},
{
"control_type": "number",
"label": "Creation date",
"parse_output": "float_conversion",
"type": "number",
"name": "creationDate"
},
{
"control_type": "number",
"label": "Modify date",
"parse_output": "float_conversion",
"type": "number",
"name": "modifyDate"
},
{
"control_type": "text",
"label": "Source",
"type": "string",
"name": "source"
},
{
"control_type": "text",
"label": "Is archived",
"render_input": "boolean_conversion",
"parse_output": "boolean_conversion",
"toggle_hint": "Select from option list",
"toggle_field": {
"label": "Is archived",
"control_type": "text",
"toggle_hint": "Use custom value",
"type": "boolean",
"name": "isArchived"
},
"type": "boolean",
"name": "isArchived"
},
{
"control_type": "text",
"label": "Type",
"type": "string",
"name": "type"
},
{
"control_type": "text",
"label": "Category",
"type": "string",
"name": "category"
},
{
"control_type": "text",
"label": "Rule code",
"type": "string",
"name": "ruleCode"
},
{
"control_type": "text",
"label": "Status",
"type": "string",
"name": "status"
},
{
"control_type": "text",
"label": "Threat description",
"type": "string",
"name": "threatDescription"
},
{
"control_type": "text",
"label": "Name",
"type": "string",
"name": "name"
},
{
"control_type": "text",
"label": "Tags",
"of": "string",
"type": "array",
"name": "tags"
},
{
"control_type": "text",
"label": "Owner uid",
"type": "string",
"name": "ownerUid"
},
{
"control_type": "text",
"label": "Path",
"type": "string",
"name": "path"
},
{
"control_type": "text",
"label": "Mitigation",
"type": "string",
"name": "mitigation"
},
{
"control_type": "text",
"label": "Has webhook message",
"render_input": "boolean_conversion",
"parse_output": "boolean_conversion",
"toggle_hint": "Select from option list",
"toggle_field": {
"label": "Has webhook message",
"control_type": "text",
"toggle_hint": "Use custom value",
"type": "boolean",
"name": "hasWebhookMessage"
},
"type": "boolean",
"name": "hasWebhookMessage"
},
{
"control_type": "text",
"label": "Owner ai object",
"type": "string",
"name": "ownerAiObject"
},
{
"control_type": "text",
"label": "Employee",
"type": "string",
"name": "employee"
},
{
"label": "Payload",
"of": "object",
"properties": [
{
"control_type": "text",
"label": "Exposed low confidence",
"render_input": "boolean_conversion",
"parse_output": "boolean_conversion",
"toggle_hint": "Select from option list",
"toggle_field": {
"label": "Exposed low confidence",
"control_type": "text",
"toggle_hint": "Use custom value",
"type": "boolean",
"name": "exposedLowConfidence"
},
"type": "boolean",
"name": "exposedLowConfidence"
},
{
"control_type": "text",
"label": "Exposed guid",
"type": "string",
"name": "exposedGuid"
},
{
"control_type": "text",
"label": "Exposed status",
"type": "string",
"name": "exposedStatus"
},
{
"control_type": "text",
"label": "Exposure URL",
"type": "string",
"name": "exposureUrl"
},
{
"control_type": "text",
"label": "Exposed type",
"type": "string",
"name": "exposedType"
},
{
"control_type": "text",
"label": "Exposed origin",
"type": "string",
"name": "exposedOrigin"
},
{
"control_type": "text",
"label": "Exposed value hashed",
"type": "string",
"name": "exposedValueHashed"
},
{
"control_type": "text",
"label": "Exposed snippet",
"type": "string",
"name": "exposedSnippet"
},
{
"control_type": "text",
"label": "Exposed redacted snippet",
"type": "string",
"name": "exposedRedactedSnippet"
},
{
"control_type": "text",
"label": "Vendor hash",
"type": "string",
"name": "vendorHash"
},
{
"properties": [
{
"control_type": "text",
"label": "Environment type",
"type": "string",
"name": "environmentType"
},
{
"control_type": "text",
"label": "Environment",
"type": "string",
"name": "environment"
},
{
"control_type": "text",
"label": "Account ID",
"type": "string",
"name": "accountId"
},
{
"control_type": "text",
"label": "Account type",
"type": "string",
"name": "accountType"
}
],
"label": "Account",
"type": "object",
"name": "account"
},
{
"control_type": "text",
"label": "Jira ticket tile",
"type": "string",
"name": "jiraTicketTile"
},
{
"control_type": "text",
"label": "Jira project name",
"type": "string",
"name": "JiraProjectName"
},
{
"control_type": "text",
"label": "Jira ticket URL",
"type": "string",
"name": "jiraTicketUrl"
},
{
"control_type": "text",
"label": "Jira ticket creator",
"type": "string",
"name": "jiraTicketCreator"
}
],
"type": "array",
"name": "payload"
},
{
"control_type": "text",
"label": "Exposure urls",
"of": "string",
"type": "array",
"name": "exposureUrls"
}
],
"label": "Created risk",
"type": "object",
"name": "createdRisk"
},
{
"control_type": "text",
"label": "Notification type",
"type": "string",
"name": "notificationType"
}
]