Overview

Torii integrates with VMware (VMware Cloud Services, now part of Broadcom) and syncs:

• The users of your VMware Cloud Services organization, including their organization roles.
• You can constantly stay updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table.

Requirements

Accounts & Permissions

To connect this integration, we require the following:

• To sync users: an API token generated by a user who can list the users of the organization. An Organization Member can list users, but VMware returns role names only to Organization Owners and read-only administrators. To see user roles in Torii, generate the token as an Organization Owner.
• To run write actions from Torii workflows (invite user, remove user, add role, remove role): an API token generated by an Organization Owner or Organization Administrator.
• The API token belongs to the user who generated it. If that user leaves the organization or the token expires, the integration stops syncing and must be reconnected with a new token.
• Torii can't connect to an organization that requires multi-factor authentication (MFA) for API tokens. VMware then asks for a passcode each time the token is used, which Torii can't provide.

Required keys

• Console Host - the console you log in to: console.cloud.vmware.com or console.cloud.broadcom.com.
• Organization ID - the ID of your VMware Cloud Services organization.
• API Token - an API token generated in the Cloud Services Console.

How to Generate the Required Values

Step 1: Choose your console host

• Log in to the Cloud Services Console the way you usually do. Note whether the address is console.cloud.vmware.com or console.cloud.broadcom.com. Generate the token on that same console and select the same host when you connect in Torii.

Step 2: Find your Organization ID

1. Log in to the Cloud Services Console.
2. In the top right corner, click the drop-down menu next to your user name and select View Organizational Details.
3. Copy the Organization ID shown next to your Organization Name. If you do not see this option, your user has not been added to an organization yet.

Step 3: Generate an API token

1. Log in to the Cloud Services Console as a user with the role described in Requirements.
2. Click your user name on the toolbar, select My Account, and then select API Tokens.
3. Click Generate a New API Token.
4. Enter a name for the token, for example Torii.
5. Set the token lifespan (TTL). It can range from several minutes up to 60 months, or never expire. The default is six months. Choose a long lifespan, or plan to reconnect the integration with a new token when it expires.
6. Under Define Scopes, select the Organization Roles for the token. The available roles depend on the roles your user holds. Select Organization Owner (or Organization Administrator for write actions).
7. Click Generate New Token.
8. Copy the token and save it in a safe place, then click Continue.

How to Connect the Integration

1. Go to the Integrations page in Torii.
2. Search for VMware and click Connect.
3. Select the Console Host, and enter the Organization ID and the API Token.
4. Click Connect.

Actions

Write actions require an API token generated by an Organization Owner or Organization Administrator.

• Invite user - invites a user to your VMware organization with the selected organization role. The user is added after they accept the invitation.
• Remove user - removes a user from your VMware organization. VMware does not allow removing the last Organization Owner.
• Add role - adds an organization role to an existing organization member.
• Remove role - removes an organization role from an existing organization member.

Q&A

Q: Which token should I use if I only want to sync users?

A: Use a token from any user who can list the organization's users. Note that VMware returns role names only for Organization Owners and read-only administrators, so with other roles users are synced without roles.

Q: The integration stopped syncing. What should I do?

A: The API token may have expired or its owner may have left the organization. Generate a new token and reconnect the integration.

For any further questions, please contact Torii Support.