Integrations

Overview of supported Lifecycle Management integrations in Veza, with capabilities and supported actions for target applications and sources of identity.

Overview

This document provides an introduction to the integrations supported by Veza Lifecycle Management (LCM), including their capabilities and the actions they support. These integrations enable you to automate identity and access management workflows across your identity sources and target applications.

Veza's Open Authorization API (OAA) can support provisioning and deprovisioning for applications not natively supported by the Veza platform. With OAA, Veza or customers can build integrations to any application that has a suitable and accessible API or integration interface.

Supported Integrations

Identity Sources

Identity sources are authoritative systems that provide information about user identities. While Veza does not require write permissions to the identity source of truth, some of these integrations are also supported as provisioning targets. Integrations can also allow write-back of a user's newly created email address to the user's record in the source of identity as part of the initial provisioning workflow.

Veza currently supports the following as sources of identity for Lifecycle Management workflows:

Identity Source	Description	Supports Email Write Back
Active Directory	A access control platform that determines if a user is authorized to access a specific resource after they have been authenticated.
Beeline	A shift-based workforce management system for high-volume personnel business Access control: AD determines if a user is authorized to access a specific resource after they have been authenticated.
Coupa CCW	Cloud-based platform for business spend management service
Custom IDP	Universal template for integrating corporate authentication systems
Custom HRIS (OAA)	Custom human resource information system integration using OAA templates
HiBob	HR platform for modern businesses
Ivanti Neurons HR	An HR platform for user onboarding/offboarding and automated self-service
Okta	Cloud-based identity management service
Workday	Cloud-based human capital management platform	Yes
Oracle HCM	Human capital management cloud	Yes
UKGPro	Human capital management (HCM) and workforce management solution
Workday	Cloud-based human capital management platform	Yes

Target Application Support

The entire catalog of Veza application integrations is Lifecycle Management-ready. Target application support in Lifecycle Management leverages Veza's existing native- and OAA-based integrations plus an intelligent shim layer in order to provide support for provisioning and de-provisioning.

As such, target application support in Lifecycle Management can be enabled for nearly every Veza-supported integration.

Validated Integrations

The following table lists the out-of-the-box, Veza-validated target application integrations for Lifecycle Management.

Target Application	Manage Relationships	Sync Identities	Deprovision Identity	Additional Actions	Supported Entitlement Types
Active Directory	✅	✅	✅	Reset Password, Create Entitlements	ActiveDirectoryGroup
Atlassian Cloud	✅	✅	✅	Delete Identity	AtlassianCloudAdminGroup
AWS SSO	✅	✅	✅	Create Entitlement	AwsSsoGroup
Azure	✅	✅	✅	Create Email, Create Entitlement	AzureADGroup, AzureADRole, ExchangeOnlineDistributionGroup, AzureADLicense
Custom Application (OAA Template)	✅	✅	✅	-	Application Groups
Exchange Server	❌	❌	❌	Create Email	-
GitHub User	✅	✅	✅	-	GithubOrganization, GithubTeam
Google Workspace (Google Cloud)	✅	✅	✅	-	GoogleWorkspaceGroup
MySQL	✅	✅	✅	Delete Identity	MySQLRoleInstance
Okta	✅	✅	✅	Reset Password, Create Entitlement	OktaGroup
Oracle Database	✅	✅	✅	Delete Identity	OracleDBRole
Oracle Fusion Cloud	❌	✅	✅	-	-
Oracle HCM	❌	✅	❌	-	-
PostgreSQL	✅	✅	✅	Delete Identity	PostgreSQLGroup
Salesforce	✅	✅	✅	-	SalesforceGroup, SalesforcePermissionSet, SalesforcePermissionSetGroup, SalesforceProfile, SalesforceUserRole
SAP ECC	✅	✅	✅	-	SapEccRole
SCIM	❌	✅	✅	-	-
ServiceNow	❌	❌	❌	Custom Action	-
Snowflake	✅	✅	✅	-	SnowflakeRole
SwiftConnect	❌	✅	✅	-	-
Workday	✅	✅	❌	-	WorkdaySecurityGroup
Veza	✅	✅	✅	-	VezaRoleBinding, VezaAccessProfile, VezaGroup

Other Supported Integrations

For any Veza-supported application not listed above, please contact your Customer Success Manager for more details and instructions on how to enable the specific Veza integration for use with Lifecycle Management as a target application for provisioning and de-provisioning.

Configuring Integrations for Lifecycle Management

Insight Points for Lifecycle Management

An Insight Point is required to enable Lifecycle Management operations and identity discovery for systems that Veza cannot access directly, such as an on-premises application server behind a firewall. The Insight Point is a lightweight connector that runs in your environment, enabling secure gathering and processing of authorization metadata for LCM tasks.

A Veza Insight Point is typically deployed as a Docker container or VM OVA, running within your network for metadata discovery and LCM job execution. This ensures secure communication between your environment and Veza.

For deployment instructions, refer to the Insight Point Documentation.

Scheduled and Manual Extractions

You can configure extraction intervals for your integrations to ensure data is regularly updated for Lifecycle Management processes.

1. Go to Veza Administration > System Settings

2. In the Pipeline > Extraction Interval section, set the global extraction interval

3. To override the global setting for specific integrations, use the Active Overrides section

Available extraction intervals are:

• Auto (hourly, but may take longer when the extraction pipeline is full)

• 15 Minutes

• 1 Hour

• 6 Hours

• 12 Hours

• 1 Day

• 2 Days

• 3 Days

• 7 Days

• 30 Days

To manually trigger an extraction:

1. Go to Integrations > All Data Sources

2. Search for the desired data source

3. Select Actions > Start Extraction

Note: Custom application payloads are extracted after the payload is pushed to Veza using the Open Authorization API.

Enabling Lifecycle Management

To enable Lifecycle Management for a specific integration:

1. Browse to the main Veza Integrations page, or go to Lifecycle Management > Integrations

2. Search for the integration you want to enable

3. Toggle the Lifecycle Management option to Enabled

Managing integrations for Lifecycle Management

Checking on Lifecycle Management Data Sources

To verify the health of the Lifecycle Management data source:

1. Use the main Veza navigation menu to open the Lifecycle Management > Integrations page or the Veza Integrations overview

2. Search for the integration and click the name to view details

3. In the Properties panel, click the magnifying glass icon under Lifecycle Management Enabled

Additional Resources

For more information:

• Refer to individual integration documentation for detailed LCM capabilities

• Consult the Lifecycle Management user guide for troubleshooting and best practices

• Contact Veza support for assistance with enabling or configuring LCM for your integrations