Overview
Torii integrates with Liongard and syncs:
| User Fields |
|---|
| Name, email, username, role (the user's Liongard roles), status (active or invited), last login and creation date |
- You can constantly stay updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table.
Requirements
Accounts & Permissions
To connect this integration, we require the following:
- A Liongard account with permission to create users and generate access tokens.
- API access is included in every Liongard plan.
- A dedicated Liongard user created specifically for the integration. Liongard supports authentication to the API via API keys generated for a user created specifically for the integration.
- For syncing users: a role that includes read access to user management. Liongard's role guide lists this for the Manager and Reader roles.
- For Torii actions (create, update and delete user): the Admin or User Admin role.
Required keys
- Liongard Instance - the subdomain of your Liongard URL (for example, us1 for us1.app.liongard.com).
- API Key (base64 of AccessKeyID:AccessKeySecret) - the base64-encoded value of your Access Key ID and Access Key Secret, joined by a colon.
How to Generate the Required Values
Step 1: Create a dedicated integration user
- In Liongard, create a new user to be used only for the Torii integration.
- Assign it a role that matches what you need: a role with read access to user management (such as Manager or Reader) to sync users, or Admin / User Admin if you also want to use Torii actions.
Step 2: Generate an access token for that user
- Sign in to Liongard as the dedicated integration user.
- Go to Account Settings >> Access Tokens and click Generate New Token.
- Set the expiry to Unlimited. A token that expires stops the sync.
- Copy the Access Key ID and the Access Key Secret.
Important
Copy the Access Key Secret right away and store it safely. You will need it in the next step.
Step 3: Encode the keys as the API key
- Open a terminal and run the command below, replacing <AccessKeyID> and <AccessKeySecret> with your own values:
echo -n "<AccessKeyID>:<AccessKeySecret>" | base64
- Copy the output. This is the value you paste into the API Key (base64 of AccessKeyID:AccessKeySecret) field in Torii.
How to Connect the Integration
- Go to the Integrations page in Torii.
- Search for Liongard and click Connect.
- Enter your Liongard Instance (for example, us1) and the API Key (base64 of AccessKeyID:AccessKeySecret) you generated.
- Click Connect.
Actions
Torii can run the following Liongard actions in workflows. These actions are newly released and have not yet been verified against a live Liongard account, so test them on a non-critical user first.
- Create User - creates a Liongard user with an email, first and last name, and a role. The available roles are Admin, System Integrator and User Admin.
- Update User - updates a user's email and role. Liongard does not document whether an update replaces or merges a user's existing roles, so a user's other roles or details may be reset.
- Delete User - deletes a Liongard user.
Limitations:
- The Manager and Reader roles are not available in actions, because Liongard requires selecting environments for them.
- Deactivating a user and managing group membership are not supported.
Q&A
Q: Will the dedicated integration user appear in Torii?
A: Yes. The user whose token you use is a Liongard user too, so it appears among the synced users.
Q: What happens if the access token expires?
A: The sync stops and Torii shows that the API key is not valid or has expired. Choose the Unlimited expiry when generating the token, or generate a new token and reconnect.
For any further questions, please contact Torii Support.