<style>p { margin: 0; }span.fr-emoticon.fr-emoticon-img { background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle; } span.fr-emoticon { font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0; } blockquote { border-left: solid 2px #5e35b1; color: #5e35b1; margin-left:0; padding-left:5px;}blockquote blockquote{ border-color: #00bcd4; color: #00bcd4;}blockquote blockquote blockquote{ border-color: #43a047; color: #43a047;} table.grid{ border-collapse: collapse;} table.grid td, table.grid th { border: 1px solid #ddd;} .fr-fic.fr-dib{ display: block; margin: 5px auto;}.fr-fic.fr-dib.fr-fir{ text-align: right; margin: 5px 0 5px auto;}.fr-fic.fr-dib.fr-fil{ text-align: left; margin: 5px auto 5px 0;}.fr-fic.fr-dii{ float: none; margin: 5px auto;}.fr-fic.fr-dii.fr-fil{ float: left; margin: 5px auto;}.fr-fic.fr-dii.fr-fir{ float: right; margin: 5px auto;}img.fr-dib.fr-fir { margin-right: 0; text-align: right;}img.fr-dib.fr-fil { margin-left: 0; text-align: left;}img.fr-dib { margin: 5px auto; display: block; float: none;}img.fr-bordered { box-sizing: content-box; border: solid 5px #CCC;}img.fr-shadow { box-shadow: 10px 10px 5px 0px #cccccc;}img.fr-rounded { border-radius: 10px; -moz-border-radius: 10px; -webkit-border-radius: 10px; -moz-background-clip: padding; -webkit-background-clip: padding-box; background-clip: padding-box;}</style><p data-pasted="true"><strong>In this guide we will cover:</strong></p><p><strong>- What is the SailPoint Integration?<br style="box-sizing: inherit;">- Enabling the SailPoint Module</strong></p><p><strong>- Connecting to SailPoint </strong></p><p data-pasted="true"><strong>- Role Mappings</strong></p><p><strong>- User Mappings</strong></p><p><strong>- Halo Integrator</strong></p><p><br></p><p><br style="box-sizing: inherit;"></p><p><strong><span style="font-size: 14pt;">What is the SailPoint Integration?</span></strong></p><p>The SailPoint integration allows you to import users and roles from SailPoint as various Halo entities.</p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><br></p><p><strong><span style="font-size: 14pt;">Enabling the SailPoint Module</span></strong></p><p>In Configuration > Integrations > Identity Management, you will find the SailPoint module. Hover over it, and click the plus (+) icon to enable it.</p><p><br></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjBmZDI0MzY1LWUyNzQtNGQ0ZS04MjE0LTM1NzNmYTFjMGM5YiJ9.Wx-IDEd4BvGnX0Za1uFNDXJXodMgJ1wXXp_C1AdIrwQ" class="fr-fic fr-fil fr-dib" width="106" height="122"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 1. Enabling the SailPoint module.</span></strong></p><p><br></p><p data-pasted="true"><strong><span style="font-size: 14pt;">Connecting to SailPoint </span></strong></p><p>Open the module and set the name for the connection, SailPoint URL, Username and Password. Once this is set you can confirm these using the "Validate" button.</p><p><br></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImJkNGYwZGJjLTdhODktNDI2My1iNjY0LTIzNzZmNDhlZGQwMyJ9.EVjz5Ndc0qPm784-G88UbAzmAe_nKyb2hBGTB3AtYBU" class="fr-fic fr-fil fr-dib" width="852" height="462"></p><p><strong><span style="font-size: 10pt;">Fig 2. Connecting to SailPoint.</span></strong></p><p><br></p><p><strong><span style="font-size: 14pt;">Role Mappings</span></strong></p><p data-pasted="true">Role mappings can be created under the "Role Mappings" tab so that roles matching certain criteria in SailPoint can be imported as one of 5 different Halo entities:</p><p><br></p><ul><li>Clients/Customers</li><li>Change Advise Boards</li><li>Teams</li><li>User Roles</li><li>Agent Roles</li></ul><p><br></p><p>Click on the "Add" button to add mappings.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjdiMTg0NTgzLTkzYjEtNDE2MC05YjRjLTkzOTdmNzc2Yjg0NiJ9._Et-o3chQqineQN5zn6fGW-DMMwUN-YCN4BdDNMene0" class="fr-fic fr-fil fr-dib" width="1015" style="width: 1017px; height: 330.675px;" height="331"></p><p><strong><span style="font-size: 10pt;">Fig 3. Adding Role Mappings.</span></strong></p><p><br></p><p>When adding a new mapping you can select the entity and description. You can also add a sequence to set what order these mappings are checked by.</p><p><br></p><p>Filters can also be created here on SailPoint fields by clicking the "Add" button.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImY4Y2RmNmVhLTBhYzYtNDM2OC05ZGU4LWY1YzcwOGM5NDFiMCJ9.X9lATuTe7aQ_L53PCs35U41q--sORrs54gUfoQkAb2A" class="fr-fic fr-fil fr-dib" width="685" height="544"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 4. Role Mappings and filters.</span></strong></p><p><br></p><p>If a field is not filterable in the SailPoint API, it is possible to filter the data after it has been retrieved (client-side filtering). You can allow this while adding your filter.</p><p><br></p><p style='margin: 0px; color: rgb(0, 0, 0); font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 13px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;'><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImI2NDYwOTQ4LWJmMGMtNDgyOC05NTRkLTE0OTkzNWU3ZDYyOCJ9.3lscwpi7vmy5ma1z2k7_ZdEeLXgtaHtqF8-DhVmZPsg" class="fr-fic fr-fil fr-dib" width="686" height="466"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 5. Allowing client-side filtering.</span></strong></p><p><br></p><p>Anything mapped within the role mappings will show additional configuration for future mappings. For example, mapping to the "Change Advise Boards" entity in the "Role Mappings" tab will show a new "Change Advise Boards" tab. Here, you can map fields from SailPoint to Halo fields.</p><p><br></p><p data-pasted="true">"Static Field Mappings" are used to set a specific value for a particular Halo property. When specifying which Halo field to update here you will need to use the field name that is returned by the API.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImNjMzMxOTFmLWJjMzQtNGM3Ny04ZjA0LTM1Njk0MzRjZTEzNSJ9.-1hPGrQGWv9oCetgI1FGfX-_zBqZPfwQtpXO1kIv8Fs" class="fr-fic fr-fil fr-dib" width="1203" style="width: 1205px; height: 341.773px;" height="342"></p><p><strong><span style="font-size: 10pt;">Fig 6. Change Advise Boards tab.</span></strong></p><p><br></p><p><span style="font-size: 11pt;"><strong>Role field for User association</strong> - The value in the Role field chosen here will be assigned to any entity created from a Role mapping. When importing Users, a field from the User entity can be used to match to different Roles based on this field.</span></p><p><strong>Role for ID field </strong>- Here, choose the field in SailPoint to use to match roles together. This should be the field that contains the unique identifier for each entity. </p><p><br></p><p data-pasted="true"><strong><span style="font-size: 14pt;">User Mappings<br></span></strong>Similar to roles, mappings can also be created so that users who meet certain criteria can be imported as one of the following Halo entities:</p><p><br></p><ul><li>Users</li><li>Agents</li></ul><p><br></p><p data-pasted="true">If mapping to users, there are options available to configure client/site matching, as well as a default role, and whether or not to import a user's manager information.</p><p><br></p><p><img data-fr-image-pasted="true" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImJhNjg3NjhlLTkyMGYtNDQwMy05MmEzLWViYWFlZWIzNWU1YSJ9.l3F9lh8b4fXQdUCIuQzdkJItybQwvruQdugaoV6A5TU" width="405" height="379" style="max-width: 100%; height: 378.889px; text-align: left; width: 407px;" class="fr-fil fr-dib"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 7. Defaults for User import.</span></strong></p><p><br></p><p><strong>User ID field - </strong>Here, choose the SailPoint field that contains the unique identifier for users. This field will be used to match users together. </p><p><strong>User field for Role association -</strong> Users can be linked to the Halo entities that are mapped to roles by using role association. For example, when a user is imported, if they belong to a role which has been mapped and imported as as a Team, the user will be added as a member of that Team. Here, you will need to select the field in SailPoint that contains the roles a user has. This field must contain a comma separated list of the roles and each role must have a mapping set in the "Role Mappings" tab. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjA1MGQ1MWJjLWZjOWUtNDdjNC1hMTE0LTM2NDZkOWFlYmRhMCJ9._EqSUpmxv7Nb6J4WAGP6TSzhB3L3Izf5Ao8vWF5VJyY" class="fr-fic fr-fil fr-dib" width="1066" style="width: 1068px; height: 139.732px;" height="140"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 8. Set User Identifier/Role Fields.</span></strong></p><p><br></p><p>Anything mapped within the user mappings will show additional configuration for future mappings. For example, mapping to the "Users" entity in the "User Mappings" tab will show a new "Users" tab. Here, you can map fields from SailPoint to Halo fields, and allow for matching on email address.</p><p><br></p><p data-pasted="true">You will also be able to set "Static Field Mappings". These mappings are used to set a specific value for a particular Halo property. When specifying which Halo field to update here you will need to use the field name that is returned by the API. The <strong>Fig 9 </strong>example sets all imported users' web access level and active status:</p><p><br></p><p><strong><span style="font-size: 10pt;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImM0NzA1YmI2LTliMDktNDljNC05NDI0LTcxMDI3Y2Q1ZGNkNiJ9.z0ZUqB8lzah52ug_4g0bZVcPOHzb0cuW_9yBroZ6Wsk" class="fr-fic fr-fil fr-dib" width="1118" style="width: 1120px; height: 410.808px;" height="411">Fig 9. Users tab.</span></strong></p><p><br></p><p data-pasted="true"><strong><span style="font-size: 14pt;">Halo Integrator </span></strong></p><p>All imports can be imported on a schedule via the Halo Integrator. To improve the performance of the imports, it is possible to use faster processing methods for both the role and user imports.</p><p><br></p><p><img data-fr-image-pasted="true" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjliZWZlNDNmLTllMjktNDZiNi04MTg2LTdhYmU2MzkzYThkOCJ9.51hFpI2vubRH3v_aWj1nBBzZUMZLEILmVVUn8GRRRoQ" width="521" height="175" style="max-width: 100%; height: 174.876px; text-align: left; width: 523px;" class="fr-fil fr-dib"></p><p><img data-fr-image-pasted="true" src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImFlODcxODkzLWExYTctNGQzZi1hNmFmLWIxMzM3MjVmOTQyNCJ9.e-ro-32sYj0g-QxQ3TxSrmeeaGzmYuPHYqhL3EbnKFk" width="521" height="106" style="max-width: 100%; height: 105.72px; text-align: left; width: 523px;" class="fr-fil fr-dib"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 10. Setting the processing method. </span></strong></p><p><br></p><p>When using the custom calculated delta for users, you must specify all fields for which you wish to track changes.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjFhNzkzNzIwLTJmYzMtNDkxZC1iM2E5LTE5YzA0YmYxYWY0NCJ9.Rwq8KuL9n6CNHMzVpp0shHEg6lsyxLkCcrd0Xx0jRVQ" class="fr-fic fr-fil fr-dib" width="1206" style="width: 1208px; height: 278.142px;" height="278"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 11. Adding Delta fields</span></strong></p><p><br></p><p>There is also an option to automatically deactivate users and/or agents when they are no longer found in SailPoint IIQ.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjVhNDQyNzYyLTM3NjktNGQ3Yy04M2QyLWY1NWI2MDQxZDU1NyJ9.rrDK-idwa1nSbuETK3GialjtGo0JR_l923A-zZkIBdY" class="fr-fic fr-fil fr-dib" width="491" height="156"></p><p data-pasted="true"><strong><span style="font-size: 10pt;">Fig 12. User/Agent deactivation setting</span></strong></p><p> </p>
