Entra ID Connector - Need For IQService Installation

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

I have a requirement to manage Entra role assignments via Sailpoint ISC.

  1. Since entra role assignments will make use of Graph API’s, I’m unsure if I still need to install IQService? Please assist
  1. I understand out of the box connector supports multiple entitlement types. How do I restrict my source to only pull entra roles and manage the same?
2

If you want to manage directly in Entra you will need the IQ Service. The IQ Service is what allows the Linux based VA’s run the required .net libraries in order to interact with Windows.

If you want to only pull in the Roles in Entra you can tell the Entitlement Aggregation to only pull in that object type.

The connector will handle if it is reaching out to on prem or entra. You can use the same IQ Service Server for this.

{B13E287D-550E-4F33-9CF8-1DAA1722C014}
{B13E287D-550E-4F33-9CF8-1DAA1722C014}1108×1122 46.9 KB

Hope this helps.

1 Like
4

HI @imagavis - Are you intending to use the VA Connector or the Saas Connector? The link you provide is for the VA connector, but the SaaS connector is pretty fully functional according to the docs: Supported Features

1 Like
5

@imagavis are you using the SAAS connector or the on prem one with VA?

1 Like
6

Hey @imagavis. Like others are saying in this thread, there are actually two connector types for managing Entra ID. One is an on-premises connector that requires a Virtual Appliance, while the other is a SaaS connector, meaning it is VA-less.

Connector Option 1 - Azure Active Directory

  • Connector Name: Azure Active Directory
  • Connector Type: On-Premises/VA-Based
  • Requires Virtual Appliance: Yes, a virutal appliance cluster is required

This connector is the on-premises connector type for Azure AD/Microsoft Entra ID. This connector is capable of role management.

Documentation Link (goes directly to role management section): Azure Active Directory Role Management

Connector Option 2 - Microsoft Entra ID

  • Connector Name: Microsoft Entra ID
  • Connector Type: SaaS/VA-less
  • Requires Virtual Appliance: No, virtual appliance clusters are not required

This connector is the SaaS/VA-less connector type for Azure AD/Microsoft Entra ID. This connector is also capable of role management.

Documentation Link (goes directly to role management section): Microsoft Entra ID Role Management

7

Thanks much! I ended up using SAAS connector which solved my use-case to only manage entra roles

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.