Atlassian Suite - Site Admin API Token issue

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Hello

Has anyone integrated ISC with Atlassian Suite?

I created a service account, and created a credential for that service account, but I am still getting the error in ISC when I test connection:

[ InvalidConfigurationException ] [ Possible suggestions ] Ensure that the configured Email Address is valid and has Atlassian administrator permissions. [ Error details ] Configured Email Address is either invalid or has insufficient permissions.}

I granted all the permissions possible, and still got the error.

I see a similar question has been asked before - but the solution did not provide details.

Set up new Source - Atlassian Suite SaaS - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community

Thanks

2

Hi @jrossicare

A few things to check.

  • Did you create an API token when logged in to the service account so this can be used in the ‘Site Admin API token’ field? See this Atlassian documentation regarding API token Manage API tokens for your Atlassian account | Atlassian Support
  • Make sure you are using the correct email address of the service account in the ‘Email Address’ field.
  • I’m sure you’ve followed this documentation to setup your Atlassian Cloud connector Connection Settings

Hope this would help.

4

Thanks Noor,

I followed your link: Manage API tokens for your Atlassian account | Atlassian Support

And got it to work

Notes:

  1. I am using Atlassian Suite SaaS connector
  2. I had to log in to Atlassian account as myself
  3. Click “Create API token” (i.e. created a token without scopes)
  4. Used this token along with my email address in the Connector connection settings

The above token worked.

What didnt work:

  1. Creating a token with Scopes didnt work
  2. Creating a token for a service account didnt work
  3. Creating a token under https://admin.atlassian.com/..…/api-keys didnt work for Site Admin API token (Edit: but this was the token I needed for Org Admin API token in order to enable/disable accounts)