Skip to content

SailPoint Entro

Playbook

Initializing search

Getting Started
SailPoint Entro Administration
Integrations
Supported Secrets
Knowledge Base
SailPoint Entro API

SailPoint Entro

Getting Started
Getting Started
SailPoint Entro Administration
SailPoint Entro Administration
- Single Sign On (SSO)
  Single Sign On (SSO)
- Management
  Management
- SailPoint Entro Outpost (On-Prem)
  SailPoint Entro Outpost (On-Prem)
- Settings
  Settings
Integrations
Integrations
- Integrations Index
- AI & Agents
  AI & Agents
  - n8n
    
    n8n
    
    n8n Onboarding
    
    n8n Permissions Reference
    
    n8n Troubleshooting And Validation
  - Claude SailPoint Entro Marketplace
    
    Claude SailPoint Entro Marketplace
    
    Claude Plugin Installation
    
    Governance Audit Plugin
    
    Secret Scanner
  - Cursor SailPoint Entro Marketplace
    
    Cursor SailPoint Entro Marketplace
    
    Cursor Plugin Installation
    
    Governance Audit Plugin
    
    Secret Scanner
  - Visual Studio Code SailPoint Entro Marketplace
    
    Visual Studio Code SailPoint Entro Marketplace
    
    VS Code Plugin Installation
    
    Governance Audit Plugin
    
    Secret Scanner
  - SailPoint Entro WebGuard
  - Open AI Agent Onboarding
- SailPoint Entro Connector
  SailPoint Entro Connector
- Cloud & Infrastructure
  Cloud & Infrastructure
  - Akeyless Vault
    
    Akeyless Vault
    
    Akeyless Onboarding
    
    Akeyless Troubleshooting And Validation
    
    Akeyless Permissions Reference
  - Amazon Web Services
    
    Amazon Web Services
    
    AWS Onboarding Steps
    
    AWS Onboarding Steps
    
    AWS Multiple Account Automation
    
    AWS Manual Onboarding
    
    AWS Manual Onboarding
    
    IAM Policy Creation Steps
    
    IAM Role Creation Steps
    
    Assume Role Link to SailPoint Entro
    
    AWS CloudTrail S3 Setup
    
    AWS CloudTrail S3 Setup
    
    Creating Trail CloudTrail Console
    
    Configure Trail CloudTrail Console
    
    AWS Troubleshooting and Validation
    
    AWS Permissions Reference
  - Azure / Entra / M365
    
    Azure / Entra / M365
    
    Azure Pre Onboarding Check
    
    Automated PowerShell Onboarding
    
    Azure Manual Onboarding
    
    Hybrid Entra AD
    
    Azure Continuous Onboarding
    
    Troubleshooting And Validation
    
    Permissions Reference
  - Azure DevOps
    
    Azure DevOps
    
    Azure DevOps Onboarding
    
    Azure DevOps Troubleshooting And Validation
  - Google Cloud Platform
    
    Google Cloud Platform
    
    GCP Pre Onboarding Check
    
    GCP Console Onboarding (Manual)
    
    GCP Console Onboarding (Manual)
    
    GCP Workload Identity Federation (Manual)
    
    GCP Terraform Onboarding (Automated)
    
    GCP Terraform Onboarding (Automated)
    
    GCP Workload Identity Federation (Automated)
    
    GCP Troubleshooting And Validation
    
    GCP Permissions Reference
  - HashiCorp Vault
    
    HashiCorp Vault
    
    HashiCorp Vault Onboarding
    
    HashiCorp Vault Troubleshooting And Validation
    
    HashiCorp Vault Permissions Reference
  - Oracle Cloud Infrastructure (OCI)
    
    Oracle Cloud Infrastructure (OCI)
    
    OCI Onboarding
    
    OCI Troubleshooting And Validation
    
    OCI Permissions Reference
  - Remote File System
    
    Remote File System
    
    SMB File Shares Onboarding
    
    SFTP (SSH) Onboarding
    
    WinRM Onboarding
    
    Remote File System Troubleshooting And Validation
- Code & CI/CD
  Code & CI/CD
- Container Registries
  Container Registries
  - JFrog Artifactory
    
    JFrog Artifactory
    
    JFrog Artifactory Onboarding
    
    JFrogArtifactory Troubleshooting And Validation
- Collaboration & SaaS
  Collaboration & SaaS
  - Atlassian Ecosystem
    
    Atlassian Ecosystem
    
    Atlassian Onboarding
    
    Atlassian Onboarding
    
    Jira - Cloud
    
    Confluence - Cloud
    
    Jira Server - On-premise
    
    Confluence Server - On-premise
    
    [Legacy] Atlassian (Jira & Confluence) - Cloud
    
    Setting Up Jira Real-Time Scanning
    
    Additional Guides and Reference
    
    Additional Guides and Reference
    
    Dedicated Atlassian User Creation
    
    Classic Token Creation
    
    API Endpoints in Use
    
    Supported Data Sources
  - Google Workspace - Google Drive
    
    Google Workspace - Google Drive
    
    Google Workspace GDrive Onboarding
    
    Google Workspace GDrive Troubleshooting And Validation
    
    Google Workspace GDrive Permissions Reference
  - Microsoft Teams
    
    Microsoft Teams
    
    Microsoft Teams Onboarding
    
    Microsoft Teams Permissions Reference
  - SharePoint / OneDrive
    
    SharePoint / OneDrive
    
    SharePoint Onboarding
    
    SharePoint Troubleshooting And Validation
    
    SharePoint Permissions Reference
  - ServiceNow
    
    ServiceNow
    
    ServiceNow Onboarding
    
    ServiceNow Troubleshooting and Validation
    
    ServiceNow Permissions Reference
  - Slack
    
    Slack
    
    Slack Onboarding
    
    Slack Troubleshooting And Validation
    
    Slack Permissions Reference
  - Salesforce
    
    Salesforce
    
    Salesforce Onboarding
    
    Salesforce Troubleshooting And Validation
    
    Salesforce Permissions Reference
- Security & Identity
  Security & Identity
- SSO
  SSO
  - SSO Setup
    
    SSO Setup
    
    SSO Azure Onboarding
    
    SSO Azure Onboarding
    
    SSO Azure Security Permissions
    
    SSO Generic Onboarding
    
    SSO Generic Onboarding
    
    SSO Generic Security Permissions
    
    SSO Okta Onboarding
    
    SSO Okta Onboarding
    
    SSO Okta Security Permissions
    
    SSO SCIM Onboarding
    
    SSO SCIM Onboarding
    
    SSO SCIM Security Permissions
Supported Secrets
Supported Secrets
- Generic Secrets
  Generic Secrets
- Specific Secrets
  Specific Secrets
Knowledge Base
Knowledge Base
- Product coverage
- Secret Scanning
  Secret Scanning
  - Summary
  - Coverage
  - Supported secrets
    
    Supported secrets
    
    OCR supported file types
    
    Requesting new secret types
  - Validity Status & Triage
  - Configurations
  - Additional features
  - Remediation
    
    Remediation
    
    Secret rotation
    
    Secret rotation
    
    Azure DevOps PAT
    
    Atlassian API Key
    
    AWS Access Key
    
    Azure Storage Access Key
    
    Azure App Registration Client Secret (Entra)
    
    Teams Webhooks
    
    GCP Service Account Key
    
    Google API Key
    
    OpenAI API Key
    
    GitHub Personal Access Token
    
    Gitlab Personal Access Token
    
    Mitigation guidelines
    
    Mitigation guidelines
    
    Pre-commit Hooks
    
    Gitlab Code Commit
    
    GitHub Code Commit
    
    GitHub Action Log
    
    GitHub Pull Request
    
    Bitbucket
    
    Slack Messages
    
    Microsoft Teams
    
    AWS Lambda
    
    AWS Parameter Store
    
    AWS Parameter Store
    
    Azure DevOps Code
    
    Azure DevOps Wiki
    
    Azure Functions
    
    GCP Functions
    
    Sharepoint
    
    Confluence
    
    Jira tickets
    
    SMB File Share
- Shift Left
  Shift Left
- Non-Human-Identity
  Non-Human-Identity
- Vault Management
  Vault Management
  - Vaults Coverage
- Threats and Risks
  Threats and Risks
  - Risks
    
    Risks
    
    Exposed Secrets
    
    Exposed Secrets
    
    Consolidated risk for the same exposed secret
    
    Cleartext exposed secrets
    
    Exposed Secrets Goldmine
    
    The same secret is exposed in multiple locations
    
    Abnormal Behavior
    
    Abnormal Behavior
    
    NHI Token access to restricted services
    
    Secret revealed by human actor
    
    Previously inactive token is now active again
    
    Previously disabled token has been reactivated
    
    Production secret is fetched by script
    
    Production secret is fetched by IDE
    
    Production token is used by IDE client
    
    Idle identity fetched a secret
    
    Secret/Token activity from restricted location
    
    Vault Dump
    
    NHI Token Used by Multiple Devices
    
    Secret was fetched by a new workload
    
    Too many entities are fetching the same secret
    
    Least Privilege
    
    Least Privilege
    
    Cross account privilege escalation via AWS Role
    
    ACL Permissions over secret
    
    Excessive unused token permissions
    
    External accounts can read your secrets
    
    Monitoring
    
    Secret Hygiene
    
    Secret Hygiene
    
    Secret Rotation
    
    Token Rotation
    
    Stale (Idle) Secret/Token
    
    Active/Idle NHI Token is about to be expired
    
    Misconfiguration
    
    Misconfiguration
    
    Misplaced Secret
    
    Former Employee Token is Enabled
    
    Human account with service account attributes
  - Playbook
    
    Playbook
    
    Detections
    Detections
    
    Detections
    
    Secret has been viewed by a human account
    
    Vault Dump
    
    Previously inactive token is now active again
    
    Previously disabled token has been reactivated
    
    Production secret is fetched by a Script
    
    Production secret is fetched by IDE
    
    Production token is used by IDE client
    
    Secret was fetched by a new workload
    
    Secret / Token activity from restricted region
    
    Idle identity fetched a secret
    
    NHI Token Used by Multiple Devices
    
    Too many entities are fetching the same secret
    
    Misconfiguration
    Misconfiguration
    
    Misconfiguration
    
    Secret last rotation is longer than 90 days
    
    Token last rotation is longer than 90 days
    
    Stale secrets
    
    Misplaced secrets
    
    Former employee token
    
    Failed "read access" attempts to multiple secrets
    
    Least Privilege
    Least Privilege
    
    Least Privilege
    
    ACL Permissions over secret
    
    Excessive unused token permissions
    
    External accounts can read your secrets
    
    Exposed Secrets
    Exposed Secrets
    
    Exposed Secrets
    
    Cleartext exposed secrets use-cases
- Employee Identity
  Employee Identity
  - Employee
- Remediation
  Remediation
- SailPoint Entro Connector
  SailPoint Entro Connector
  - (Deprecated) On-prem Connector
- Management
  Management
  - Role-Based Access Control (RBAC)
    Role-Based Access Control (RBAC)
    
    Role-Based Access Control (RBAC)
    
    Groups-Roles Mapping
  - JIT Access Platform
    JIT Access Platform
    
    JIT Access Platform
    
    JIT Portal
    
    JIT Request Creation
    
    JIT Requests Management
    
    JIT AWS Onboarding
    
    JIT Azure Onboarding
    
    JIT GitHub Onboarding
    
    JIT Automation Policies
    
    JIT MCP for Agentic AI
- Supported Secret Types
  Supported Secret Types
  - Specific Secrets
  - Generic Secrets
- Automation, SOAR and SIEM
  Automation, SOAR and SIEM
- Agentic AI Security
  Agentic AI Security
SailPoint Entro API
SailPoint Entro API
- Risk
- Exposed Secret
- Scanner
- Reporting
- Utils
- Employee
- Connectors
- Accounts
- Integrations
- Identity Security Cloud

Playbook

Comprehensive guide to mastering non-human identity and secrets management.

Misconfiguration

Least Privilege

Exposed Secrets

Human account with service account attributes

Copyright © 2026 SailPoint Technologies, Inc. All Rights Reserved.