Resources and Connectors

This feature is currently available only to customers participating in a private preview. If you'd like to participate to be among the first to try this feature, ask our support or account team for details.

To implement IGA and ILM, you must integrate the Delinea Platform with your workforce management system (such as BambooHR or Workday) and / or your identity and access management system (such as Entra ID or Okta).

In Delinea IGA these applications are called resources. You can associate a resource with an identity, so that creation of a new job role in the HR system automatically creates an Entra ID account and email address for this person.

Available Resources / Connectors (Coming Soon)

  • BambooHR Connector

  • Delinea Governance Connector

  • Entra ID Connector

  • Okta Connector

  • PingOne Connector

  • Workday Connector

Managing Resources

To view, create, or edit a resource, navigate to the Resources page.

Creating a Resource

To create a resource, select the Create Resource button.

On the resulting page, fill out all of the required fields and any additional desire fields (referring to the below table) and select Save.

Field

Required / Optional

Data Type

Note

Name

Required

Unique; Text

A unique name for the Resource.

Friendly Name

Unique; Text

An optional, more legible and memorable name for the resource.

Description

Required

A text description of the Resource.

Email Message

Text

If provided, the text entered here will be included in the email sent to the user when the resource is assigned.

Label

Selection

A simple tag applied to a resource.

Application

Boolean

If set to true, this resource will be an application.

Integration

Selection

Select an integration from the dropdown list.

  • The “Integration Settings” section and the “Supported Objects” and “Action on Resource Removal” fields only appear once an Integration is selected.

Supported Objects

Lookup; Selection

Select users and/or groups. This will define what will be available for synchronization and provisioning through this integration.

  • If the integration only supports one object type, then only that type will be displayed here.

Action on Resource Removal

Defines what the IGA system does when a user loses access to this resource.

  • Delete: When a user loses access to this resource, their account in the integrated system will be deleted.

  • Disable: When a user loses access to this resource, their account in the integrated system will be disabled.

Access Requests

  • Auto Approved: Allows identities to add this resource to their account instead of initiating a request, which will have to go through an approval process.

    • If this field is set to true, you can't configure the Owner field.

  • Owner: Once an Owner is added, the selection can be edited or removed only until the resource is saved.

  • Request Reason Required: When set to true, identities cannot request this role unless they provide a reason to accompany their request. When set to false, providing a reason when making a request is optional.

Workflows

  • Approval Workflow: The workflow to run to approve access requests to this resource

  • Added Workflow: The workflow to run when this resource is added to a user

  • Removed Workflow: The workflow to run when this resource is removed from a user

Deleting a Resource

When deleting a resource, the system will check if the resource being deleted is in use.

  • If it is in use, you will be notified and won’t be allowed to delete the resource.

  • If it is not in use, the resource will be deleted alongside any related entitlements.

A resource is considered in use if it is:

  • Assigned to any identity

  • Part of any role

  • In any catalog

  • Assigned to a user type