Overview
Torii integrates with HashiCorp and syncs the users of one HashiCorp Cloud Platform (HCP) organization:
- User email and full name.
- The HCP organization role or roles assigned directly to the user (for example, roles/admin). Roles that a user receives only through an HCP group, and project-level roles, are not shown. Pending invitations are not synced.
- HCP is billed by usage, so Torii does not show a paid HCP seat for users.
- You can constantly stay updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table.
Supported Actions
These actions are in beta and need a service principal with the Admin role.
- Invite HashiCorp member - invites a user to your HCP organization with the Admin, Contributor or Viewer role. Not available when SSO is enabled for the organization, because members then come from your identity provider. A new member shows in Torii after the next sync.
- Remove HashiCorp member - removes a member from your HCP organization. It does not cancel a pending invitation.
Requirements
To connect this integration, we require the following:
Accounts & Permissions
- An HCP account with access to manage Access control (IAM) for your organization.
- An organization-level service principal with the Admin role. HCP's Viewer role cannot read the organization's IAM policy, which Torii needs to sync member roles.
Required keys
- Client ID - from a service principal key.
- Client Secret - from the same service principal key.
- Organization ID - the ID of your HCP organization.
How to Generate the Required Values
Step 1: Create an organization-level service principal
- Log in to the HCP portal and choose your organization.
- Click Access control (IAM).
- Click Service principals.
- Click Create service principal.
- Enter a name for the service principal, then select the organization as the scope and the Admin role.
- Click Create service principal.
Step 2: Generate a service principal key
- In Access control (IAM) >> Service principals, click the service principal you created.
- Click Keys.
- Click Generate key.
- Copy the Client ID and the Client secret and save them in a secure location.
Important
Copy the Client secret when the key is generated and store it securely. A service principal can have a maximum of two keys.
Step 3: Copy the Organization ID
- At the top of the HCP portal, open the organization and project selector and choose View all organizations.
- Click your organization's name.
- On the Organization dashboard, click Organization settings.
- Click the clipboard icon next to the ID to copy the Organization ID.
How to Connect the Integration
- Go to the Integrations page in Torii.
- Search for HashiCorp and click Connect.
- Enter the Client ID, Client Secret and Organization ID.
- Click Connect.
For any further questions, please contact Torii Support.