<style>p { margin: 0; }span.fr-emoticon.fr-emoticon-img { background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle; } span.fr-emoticon { font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0; } blockquote { border-left: solid 2px #5e35b1; color: #5e35b1; margin-left:0; padding-left:5px;}blockquote blockquote{ border-color: #00bcd4; color: #00bcd4;}blockquote blockquote blockquote{ border-color: #43a047; color: #43a047;} table.grid{ border-collapse: collapse;} table.grid td, table.grid th { border: 1px solid #ddd;} .fr-fic.fr-dib{ display: block; margin: 5px auto;}.fr-fic.fr-dib.fr-fir{ text-align: right; margin: 5px 0 5px auto;}.fr-fic.fr-dib.fr-fil{ text-align: left; margin: 5px auto 5px 0;}.fr-fic.fr-dii{ float: none; margin: 5px auto;}.fr-fic.fr-dii.fr-fil{ float: left; margin: 5px auto;}.fr-fic.fr-dii.fr-fir{ float: right; margin: 5px auto;}img.fr-dib.fr-fir { margin-right: 0; text-align: right;}img.fr-dib.fr-fil { margin-left: 0; text-align: left;}img.fr-dib { margin: 5px auto; display: block; float: none;}img.fr-bordered { box-sizing: content-box; border: solid 5px #CCC;}img.fr-shadow { box-shadow: 10px 10px 5px 0px #cccccc;}img.fr-rounded { border-radius: 10px; -moz-border-radius: 10px; -webkit-border-radius: 10px; -moz-background-clip: padding; -webkit-background-clip: padding-box; background-clip: padding-box;}</style><p data-pasted="true"><strong>In this guide we will cover:</strong></p><p><strong>- What is the SailPoint Integration?<br style="box-sizing: inherit;">- Enabling the SailPoint Module</strong></p><p><strong>- Connecting to SailPoint </strong></p><p data-pasted="true"><strong>- Role Mappings</strong></p><p><strong>- User Mappings</strong></p><p><strong>- Halo Integrator</strong></p><p><br></p><p><br style="box-sizing: inherit;"></p><p><strong><span style="font-size: 14pt;">What is the SailPoint Integration?</span></strong></p><p>The SailPoint integration allows you to import users and roles from SailPoint as various Halo entities.</p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><br></p><p><strong><span style="font-size: 14pt;">Enabling the SailPoint Module</span></strong></p><p>In Configuration > Integrations > Identity Management, you will find the SailPoint module. Hover over it, and click the plus (+) icon to enable it.</p><p><br></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjBmZDI0MzY1LWUyNzQtNGQ0ZS04MjE0LTM1NzNmYTFjMGM5YiJ9.Wx-IDEd4BvGnX0Za1uFNDXJXodMgJ1wXXp_C1AdIrwQ" class="fr-fic fr-fil fr-dib" width="106" height="122"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 1. Enabling the SailPoint module.</span></strong></p><p><br></p><p data-pasted="true"><strong><span style="font-size: 14pt;">Connecting to SailPoint </span></strong></p><p>Open the module and set the name for the connection, SailPoint URL, Username and Password. Once this is set you can confirm these using the "Validate" button.</p><p><br></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImJkNGYwZGJjLTdhODktNDI2My1iNjY0LTIzNzZmNDhlZGQwMyJ9.EVjz5Ndc0qPm784-G88UbAzmAe_nKyb2hBGTB3AtYBU" class="fr-fic fr-fil fr-dib" width="852" height="462"></p><p><strong><span style="font-size: 10pt;">Fig 2. Connecting to SailPoint.</span></strong></p><p><br></p><p><strong><span style="font-size: 14pt;">Role Mappings</span></strong></p><p data-pasted="true">Role mappings can be created under the "Role Mappings" tab so that roles matching certain criteria in SailPoint can be imported as one of 5 different Halo entities:</p><p><br></p><ul><li>Clients/Customers</li><li>Change Advise Boards</li><li>Teams</li><li>User Roles</li><li>Agent Roles</li></ul><p><br></p><p>Click on the "Add" button to add mappings.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjdiMTg0NTgzLTkzYjEtNDE2MC05YjRjLTkzOTdmNzc2Yjg0NiJ9._Et-o3chQqineQN5zn6fGW-DMMwUN-YCN4BdDNMene0" class="fr-fic fr-fil fr-dib" width="1015" style="width: 1017px; height: 330.675px;" height="331"></p><p><strong><span style="font-size: 10pt;">Fig 3. Adding Role Mappings.</span></strong></p><p><br></p><p>When adding a new mapping you can select the entity and description. You can also add a sequence to set what order these mappings are checked by.</p><p><br></p><p>Filters can also be created here on SailPoint fields by clicking the "Add" button.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImY4Y2RmNmVhLTBhYzYtNDM2OC05ZGU4LWY1YzcwOGM5NDFiMCJ9.X9lATuTe7aQ_L53PCs35U41q--sORrs54gUfoQkAb2A" class="fr-fic fr-fil fr-dib" width="685" height="544"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 4. Role Mappings and filters.</span></strong></p><p><br></p><p>If a field is not filterable in the SailPoint API, it is possible to filter the data after it has been retrieved (client-side filtering). You can allow this while adding your filter.</p><p><br></p><p style='margin: 0px; color: rgb(0, 0, 0); font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 13px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;'><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImI2NDYwOTQ4LWJmMGMtNDgyOC05NTRkLTE0OTkzNWU3ZDYyOCJ9.3lscwpi7vmy5ma1z2k7_ZdEeLXgtaHtqF8-DhVmZPsg" class="fr-fic fr-fil fr-dib" width="686" height="466"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 5. Allowing client-side filtering.</span></strong></p><p><br></p><p>Anything mapped within the role mappings will show additional configuration for future mappings. For example, mapping to the "Change Advise Boards" entity in the "Role Mappings" tab will show a new "Change Advise Boards" tab. Here, you can map fields from SailPoint to Halo fields.</p><p><br></p><p data-pasted="true">"Static Field Mappings" are used to set a specific value for a particular Halo property. When specifying which Halo field to update here you will need to use the field name that is returned by the API.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImNjMzMxOTFmLWJjMzQtNGM3Ny04ZjA0LTM1Njk0MzRjZTEzNSJ9.-1hPGrQGWv9oCetgI1FGfX-_zBqZPfwQtpXO1kIv8Fs" class="fr-fic fr-fil fr-dib" width="1203" style="width: 1205px; height: 341.773px;" height="342"></p><p><strong><span style="font-size: 10pt;">Fig 6. Change Advise Boards tab.</span></strong></p><p><br></p><p><span style="font-size: 11pt;"><strong>Role field for User association</strong> - The value in the Role field chosen here will be assigned to any entity created from a Role mapping. When importing Users, a field from the User entity can be used to match to different Roles based on this field.</span></p><p><strong>Role for ID field </strong>- Here, choose the field in SailPoint to use to match roles together. This should be the field that contains the unique identifier for each entity. </p><p><br></p><p data-pasted="true"><strong><span style="font-size: 14pt;">User Mappings<br></span></strong>Similar to roles, mappings can also be created so that users who meet certain criteria can be imported as one of the following Halo entities:</p><p><br></p><ul><li>Users</li><li>Agents</li></ul><p><br></p><p data-pasted="true">If mapping to users, there are options available to configure client/site matching, as well as a default role, and whether or not to import a user's manager information.</p><p><br></p><p><img data-fr-image-pasted="true" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImJhNjg3NjhlLTkyMGYtNDQwMy05MmEzLWViYWFlZWIzNWU1YSJ9.l3F9lh8b4fXQdUCIuQzdkJItybQwvruQdugaoV6A5TU" width="405" height="379" style="max-width: 100%; height: 378.889px; text-align: left; width: 407px;" class="fr-fil fr-dib"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 7. Defaults for User import.</span></strong></p><p><br></p><p><strong>User ID field - </strong>Here, choose the SailPoint field that contains the unique identifier for users. This field will be used to match users together. </p><p><strong>User field for Role association -</strong> Users can be linked to the Halo entities that are mapped to roles by using role association. For example, when a user is imported, if they belong to a role which has been mapped and imported as as a Team, the user will be added as a member of that Team. Here, you will need to select the field in SailPoint that contains the roles a user has. This field must contain a comma separated list of the roles and each role must have a mapping set in the "Role Mappings" tab. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjA1MGQ1MWJjLWZjOWUtNDdjNC1hMTE0LTM2NDZkOWFlYmRhMCJ9._EqSUpmxv7Nb6J4WAGP6TSzhB3L3Izf5Ao8vWF5VJyY" class="fr-fic fr-fil fr-dib" width="1066" style="width: 1068px; height: 139.732px;" height="140"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 8. Set User Identifier/Role Fields.</span></strong></p><p><br></p><p>Anything mapped within the user mappings will show additional configuration for field mappings. Once a user mapping for users has been created a new "Users" tab will appear. Once an agent mapping for agents has been created a new "Agents" tab will appear. Here you can map fields in SailPoint Identity Now to Halo fields to control where data is imported, field mappings are setup in the tabs for the respective entity. </p><p><br></p><p><strong><span style="font-size: 10pt;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImM0NzA1YmI2LTliMDktNDljNC05NDI0LTcxMDI3Y2Q1ZGNkNiJ9.z0ZUqB8lzah52ug_4g0bZVcPOHzb0cuW_9yBroZ6Wsk" class="fr-fic fr-fil fr-dib" width="1118" style="width: 1120px; height: 410.808px;" height="411">Fig 9. Users tab.</span></strong></p><p><br></p><p data-pasted="true"><strong><em>Note: From v2.244+ the 'Title' and 'Login' fields for users will be available to map/import data from.</em></strong></p><p><br></p><p>You will also be able to set "Static Field Mappings". These mappings are used to set a specific value for a particular Halo property. When specifying which Halo field to update here you will need to use the field name that is returned by the API. The Figure 9 example sets all imported users' web access level to '10' and their status to active.</p><p><br></p><p data-pasted="true"><strong><span style="font-size: 14pt;">Halo Integrator </span></strong></p><p>All imports can be imported on a schedule via the Halo Integrator. To improve the performance of the imports, it is possible to use faster processing methods for both the role and user imports.</p><p><br></p><p><img data-fr-image-pasted="true" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjliZWZlNDNmLTllMjktNDZiNi04MTg2LTdhYmU2MzkzYThkOCJ9.51hFpI2vubRH3v_aWj1nBBzZUMZLEILmVVUn8GRRRoQ" width="521" height="175" style="max-width: 100%; height: 174.876px; text-align: left; width: 523px;" class="fr-fil fr-dib"></p><p><img data-fr-image-pasted="true" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImFlODcxODkzLWExYTctNGQzZi1hNmFmLWIxMzM3MjVmOTQyNCJ9.e-ro-32sYj0g-QxQ3TxSrmeeaGzmYuPHYqhL3EbnKFk" width="521" height="106" style="max-width: 100%; height: 105.72px; text-align: left; width: 523px;" class="fr-fil fr-dib"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 10. Setting the processing method. </span></strong></p><p><br></p><p>When using the custom calculated delta for users, you must specify all fields for which you wish to track changes.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjFhNzkzNzIwLTJmYzMtNDkxZC1iM2E5LTE5YzA0YmYxYWY0NCJ9.Rwq8KuL9n6CNHMzVpp0shHEg6lsyxLkCcrd0Xx0jRVQ" class="fr-fic fr-fil fr-dib" width="1206" style="width: 1208px; height: 278.142px;" height="278"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 11. Adding Delta fields</span></strong></p><p><br></p><p>There is also an option to automatically deactivate users and/or agents when they are no longer found in SailPoint IIQ.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjVhNDQyNzYyLTM3NjktNGQ3Yy04M2QyLWY1NWI2MDQxZDU1NyJ9.rrDK-idwa1nSbuETK3GialjtGo0JR_l923A-zZkIBdY" class="fr-fic fr-fil fr-dib" width="491" height="156"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 12. User/Agent deactivation setting</span></strong></p><p> </p>