How can we help?

HashiCorp Integration

Netanel Hugi
Netanel Hugi
  • Updated
Torii SMP
Torii Identity

Overview

Torii integrates with HashiCorp and syncs the users of one HashiCorp Cloud Platform (HCP) organization:

  • User email and full name.
  • The HCP organization role or roles assigned directly to the user (for example, roles/admin). Roles that a user receives only through an HCP group, and project-level roles, are not shown. Pending invitations are not synced.
  • HCP is billed by usage, so Torii does not show a paid HCP seat for users.
  • You can constantly stay updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table.

Supported Actions

These actions are in beta and need a service principal with the Admin role.

  • Invite HashiCorp member - invites a user to your HCP organization with the Admin, Contributor or Viewer role. Not available when SSO is enabled for the organization, because members then come from your identity provider. A new member shows in Torii after the next sync.
  • Remove HashiCorp member - removes a member from your HCP organization. It does not cancel a pending invitation.

Requirements

To connect this integration, we require the following:

Accounts & Permissions

  • An HCP account with access to manage Access control (IAM) for your organization.
  • An organization-level service principal with the Admin role. HCP's Viewer role cannot read the organization's IAM policy, which Torii needs to sync member roles.

Required keys

  • Client ID - from a service principal key.
  • Client Secret - from the same service principal key.
  • Organization ID - the ID of your HCP organization.

How to Generate the Required Values

Step 1: Create an organization-level service principal

  1. Log in to the HCP portal and choose your organization.
  2. Click Access control (IAM).
  3. Click Service principals.
  4. Click Create service principal.
  5. Enter a name for the service principal, then select the organization as the scope and the Admin role.
  6. Click Create service principal.

Step 2: Generate a service principal key

  1. In Access control (IAM) >> Service principals, click the service principal you created.
  2. Click Keys.
  3. Click Generate key.
  4. Copy the Client ID and the Client secret and save them in a secure location.

Important
Copy the Client secret when the key is generated and store it securely. A service principal can have a maximum of two keys.

Step 3: Copy the Organization ID

  1. At the top of the HCP portal, open the organization and project selector and choose View all organizations.
  2. Click your organization's name.
  3. On the Organization dashboard, click Organization settings.
  4. Click the clipboard icon next to the ID to copy the Organization ID.

How to Connect the Integration

  1. Go to the Integrations page in Torii.
  2. Search for HashiCorp and click Connect.
  3. Enter the Client ID, Client Secret and Organization ID.
  4. Click Connect.


For any further questions, please contact Torii Support.

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request