- 16 Dec 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
Smartsheet
- Updated on 16 Dec 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
Smartsheet is a cloud-based work management platform that empowers collaboration, drives better decision making, and accelerates innovation.
Types of Assets Fetched
This adapter fetches the following types of assets:
- Users
- SaaS data
Parameters
Authentication Method - Select API Token or OAuth2 as your method for authentication.
Token (when API Token is selected as authentication method) - The access token created for the Axonius application.
Application Client ID and Application Client Secret (when OAuth2 is selected as authentication method) - The OAuth Client ID and Client Secret for OAuth access to Smartsheet. For more information, see Request an Authorization Code.
Refresh Token (when OAuth2 is selected as authentication method) - When using the OAuth method of authentication, enter the value of the Refresh Token issued by a Smartsheet instance. For more information, see Get or Refresh an Access Token.
Username and Password (only for accounts with SaaS Management capability) - The user credentials of the user created for fetching SaaS data.
2FA Secret Key (only for accounts with SaaS Management capability) - If you access Smartsheet through an SSO solution that requires multi-factor authentication, you will need to generate a secret key in that solution and paste it here. See instructions for performing this action in Okta.
Verify SSL - Select to verify the SSL certificate offered by the value supplied in Host Name or IP Address. For more details, see SSL Trust & CA Settings.
HTTPS Proxy (optional) - A proxy to use when connecting to the value supplied in Host Name or IP Address.
HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
HTTPS Proxy Password (optional) - The password to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.
Advanced Settings
Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to Advanced Configuration for Adapters
- Fetch Group Data - Select this option to fetch group data for Smartsheet users.
- Parse Last Logon As Last Seen - Select this option to populate the "Last Seen" field with the value of "Last Logon".
APIs
Axonius uses the Smartsheet API.
Required Permissions
While to access SaaS data you need to grant roles and/or permissions that include write capabilities, the adapter only actually reads data from the application.
if using Oauth2 flow, the required SCOPE for Request an Authorization Code is READ_USERS.
The username and password you create for fetching SaaS data, must have administrator permissions.
Setting Up the Integration
To successfully connect this adapter, you need to create a user account and an application access token by completing the following steps:
Create a User Account
This process is only needed for retrieving SaaS data.
If single-sign-on is enabled and the 'Email + Password option' is disabled, then it is recommended to derive the username and password from a user account maintained by the SSO solution.
- It is recommended for the username and password to be derived from a newly created user account dedicated for the usage of Axonius. Retrieve the username and password from that user account.
- The password length should be at least 32 characters.
- The System Licensed User role should be disabled and the System Admin role needs to be enabled.
Create an Application Access Token
This process is only needed if API Token is selected as the authentication method
The application access token needs to be derived from the newly create user account.
- Login to Smartsheet as the user.
- Click the user's avatar and select Personal Settings.
- Navigate to API Access and generate a new access token.
- Copy and save the token.
- In Axonius, paste the copied token in the Token field.