# lumos: Integrations ## Integrations ### Getting Started - [Integrations Overview](https://docs.lumos.com/integrations/getting-started/documentation-overview.md): Find the right way to connect your systems to Lumos. - [Choosing a Connection Strategy](https://docs.lumos.com/integrations/getting-started/choosing-a-connection-strategy.md): Decide how to connect a system to Lumos, from a dedicated Integration Library connector to a generic connector, the Connector SDK, or Manual Tasks. - [Connecting an Integration](https://docs.lumos.com/integrations/getting-started/connecting-an-integration.md): Learn the shared steps for connecting any integration in Lumos, how to read a Capabilities table, and the trade-off between read-only and provisioning access. ### Supported Generics #### Databases - [Connecting Databases with Lumos](https://docs.lumos.com/integrations/generics/databases/connecting-databases-with-lumos.md): Connect a JDBC database or CSV files on the On-Premise Agent host to Lumos by writing a SQL query for each sync and provisioning capability. - [Database Query Examples](https://docs.lumos.com/integrations/generics/databases/examples.md): Copy JDBC connection strings and capability queries for SQL Server, Oracle, PostgreSQL, MySQL, MongoDB, Snowflake and Databricks into the Database connector. #### Directory (AD) - [Connecting Directories with Lumos](https://docs.lumos.com/integrations/generics/directory-ad/connecting-directories-with-lumos.md): Connect Active Directory or another LDAP directory through the On-Premise Agent to sync users, groups and attributes and provision group access. - [Directory Search Filter Examples](https://docs.lumos.com/integrations/generics/directory-ad/examples.md): Copy sample LDAP filters that import only some Active Directory users and groups, such as nested group members, listed groups, or enabled accounts. #### Flatfile - [Connecting Flat Files with Lumos](https://docs.lumos.com/integrations/generics/flatfile/connecting-flat-files-with-lumos.md): Ingest user and access data from CSV files stored in S3 or on an SFTP server, then map the columns to Lumos fields for apps without an API. - [Flat File CSV Example](https://docs.lumos.com/integrations/generics/flatfile/examples.md): Format a CSV for the Lumos flat file connector using a sample template with the expected identity fields, status values, attribute and permission columns. #### SCIM - [Connecting SCIM Apps with Lumos](https://docs.lumos.com/integrations/generics/scim/connecting-scim-apps-with-lumos.md): Connect any SCIM 2.0 application with a token or OAuth client credentials to sync and provision users and group membership without a dedicated connector. - [SCIM Payload Examples](https://docs.lumos.com/integrations/generics/scim/examples.md): Review the SCIM 2.0 payloads Lumos sends to list, create and deactivate users and change group membership, and verify a SCIM provider before connecting. #### Universal REST - [Connecting REST Applications with Lumos](https://docs.lumos.com/integrations/generics/universal-rest/connecting-rest-applications-with-lumos.md): Configure the Universal REST connector with JSON blocks for accounts, entitlements, associations, pagination, and writes to connect a REST API without code. - [Universal REST Configuration Examples](https://docs.lumos.com/integrations/generics/universal-rest/examples.md): Start from verified Universal REST configurations for SCIM Playground, Databricks, ADP, Salesforce, GitHub, Datadog, HubSpot, Google Play Store, and Halo ITSM. ### Webhooks, ITSM, and Manual Tasks #### Webhooks - [Creating Webhooks](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/creating-webhooks.md): Create and test a webhook in Lumos settings with an endpoint URL and custom headers, and return the JSON response format Lumos expects. - [Deprovisioning Webhooks](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/deprovisioning-webhooks.md): Set up deprovisioning webhooks that remove access when time-based access expires, an Access Review rejects an account, or an inactivity workflow flags it. - [Extending Lumos With Webhooks](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/extending-lumos-with-webhooks.md): Learn how Lumos Inline Webhooks automate provisioning, deprovisioning, pre-approval, and request validation for apps your IdP cannot provision. - [Pre-Approval Webhooks](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/pre-approval-webhooks.md): Add pre-approval webhooks to AppStore pre-approval rules to check an outside system before pre-approving a request, with the payload and expected responses. - [Provisioning Webhooks](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/provisioning-webhooks.md): Use provisioning webhooks to automate AppStore access grants for apps without SCIM, with the JSON payload Lumos sends and the responses it accepts. - [Request Validation Webhooks](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/request-validation-webhooks.md): Use request validation webhooks to accept or reject AppStore requests after checks like training, background checks, or SoD, with the payload and responses. - [SIEM Webhooks](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/siem-webhooks.md): Create a SIEM webhook that posts each Lumos Activity Log event as JSON to an HTTP endpoint you choose when no native SIEM integration exists. - [Understanding Webhook Task Failures in Lumos](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/troubleshooting-failed-deprovisioning-tasks-with-custom-webhooks.md): Find out why webhook tasks show as failed in Lumos after your system succeeded, such as the 15-second timeout or upstream API limits, and how to avoid it. - [Verifying Webhook Signatures](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/verifying-webhook-signatures.md): Verify webhooks came from Lumos by checking the X-Lumos-Webhook-Signature header, an HMAC-SHA256 of the timestamp and request body. - [Webhook FAQs](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/webhook-faqs.md): Answers common webhook questions about the 15-second timeout, the lack of retries, the payload format, and whether custom fields and attributes are sent. - [Webhook Security for Offboarding Payloads](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/webhook-security-for-offboarding-payloads.md): Learn how Lumos protects deprovisioning webhook payloads with HTTPS, signatures, and blocked redirects, and exactly which identity fields the payload holds. - [How Lumos Logs to Your SIEM](https://docs.lumos.com/integrations/webhooks-itsm-and-manual-tasks/how-lumos-logs-to-your-siem.md): Reference for the JSON event payload Lumos sends to your SIEM integration, with logged event types by category and the actor and target types. ### On-Premise Agent - [On-Premise Agent Overview](https://docs.lumos.com/integrations/on-premise-agent/on-premise-agent-1.md): Secure bridge between your internal systems and the Lumos Autonomous Identity Platform - [Quickstart Guide](https://docs.lumos.com/integrations/on-premise-agent/agent-quickstart-guide.md): Install the Lumos On-Premise Agent on Windows or Docker, deploy stock and custom connectors, cluster and run multiple agents, and validate the setup. - [Installation](https://docs.lumos.com/integrations/on-premise-agent/installation.md): Lumos On-Premise Agent installation on Windows and containers - [Adding Additional CA Certificates](https://docs.lumos.com/integrations/on-premise-agent/adding-additional-ca-certificates.md): If a connector hosted within your Lumos On-Premise Agent needs to connect via HTTPS to a service that utilizes internal or self signed certificates, you may need to add additional certificate files for the Agent and Connectors to use. - [Configuring Read and Write Optimized Agents](https://docs.lumos.com/integrations/on-premise-agent/configuring-read-and-write-optimized-agents.md): Configure the Lumos On-Premise Agent to prefer read or write connector operations. - [Validating Your On-Premise Agent Deployment](https://docs.lumos.com/integrations/on-premise-agent/validating-your-on-premise-agent-deployment.md): Enable the optional HTTP server and use the info endpoint to validate your On-Premise Agent environment and Lumos connectivity. - [High-Availability Architecture](https://docs.lumos.com/integrations/on-premise-agent/high-availability-architecture.md): Deploy the Lumos Agent for redundancy - [On-Premise Agent Clustering](https://docs.lumos.com/integrations/on-premise-agent/on-premise-agent-clustering.md): Support for multi-network On-Premise Agent clustering - [Reference Architecture](https://docs.lumos.com/integrations/on-premise-agent/reference-architecture.md): Lumos enterprise architecture and deployment strategy ### Connector SDK - [Introduction](https://docs.lumos.com/integrations/connector-sdk/introduction.md): Learn how Lumos connectors describe, configure and run capabilities, and how to build, test and deploy a custom connector with the Lumos Python Connector SDK. - [Concepts](https://docs.lumos.com/integrations/connector-sdk/concepts.md): Learn the core Lumos Connector API concepts, including connectors, capabilities, the account and entitlement data model, authentication, and pagination. #### Building Your Own Integration - [Quick Start Guide](https://docs.lumos.com/integrations/connector-sdk/building-your-own-integration/quick-start-guide.md): Reference each file in a custom Lumos connector built with the Connector SDK, from settings and enums to the client, capabilities, and integration setup. - [Step-By-Step Tutorial](https://docs.lumos.com/integrations/connector-sdk/building-your-own-integration/step-by-step-tutorial.md): Build a custom Lumos connector step by step against a mock FastAPI server, implement read and write capabilities, and test it from the command line. - [Mock Server for Testing](https://docs.lumos.com/integrations/connector-sdk/building-your-own-integration/mock-server-for-testing.md): Copy a FastAPI mock server script that simulates users, resources, entitlements, and OAuth endpoints for testing a custom Lumos connector locally. ### Managing Integrations Programmatically - [How Lumos Syncs Your Integrations](https://docs.lumos.com/integrations/managing-integrations/how-lumos-syncs-your-integrations.md): Review which Lumos syncs run automatically and when, and how to trigger ad hoc user, group, app, and Shadow IT discovery syncs yourself. - [Incremental (Delta) Syncs: Overview and How They Work](https://docs.lumos.com/integrations/managing-integrations/incremental-delta-syncs-overview-and-how-they-work.md): Learn how incremental syncs pull only changed accounts and identities between complete syncs, what they leave out, and which integrations support them. - [HRIS Integration Capabilities](https://docs.lumos.com/integrations/managing-integrations/hris-integration-capabilities.md): See how Merge-based HRIS integrations map HRIS user status to Lumos account and employment status, and which user attribute fields each HRIS supports. ### Integration Library - [15Five](https://docs.lumos.com/integrations/library/15five.md): Connect 15Five with a SCIM Access token to sync users, roles, and last login, and suspend users during offboarding, with no read-only option. - [Active Directory](https://docs.lumos.com/integrations/library/active-directory.md): Connect Active Directory through the On-Premise Agent to sync users and groups and to create, update, deactivate, move, and delete accounts. - [Adobe](https://docs.lumos.com/integrations/library/adobe.md): Connect Adobe with an OAuth Server-to-Server credential to sync and provision users, user groups, and product profiles, with no read-only option. - [Adobe Acrobat Sign](https://docs.lumos.com/integrations/library/adobe-acrobat-sign.md): Connect Adobe Acrobat Sign with an OAuth app to sync and provision users, groups, and the ADMIN role, or connect read-only with only the read scope. - [ADP Workforce Now](https://docs.lumos.com/integrations/library/adp-workforce-now.md): Connect ADP Workforce Now via Direct API with an OAuth app and SSL certificate to sync workers, org units, and positions, read-only or with email write-back. - [ADP Workforce Now (Merge)](https://docs.lumos.com/integrations/library/adp-workforce-now-merge.md): Connect ADP Workforce Now through the Merge.dev pop-up flow for read-only sync of workers, groups, and roles as a source of user data. - [Adyen](https://docs.lumos.com/integrations/library/adyen.md): Connect Adyen with a Management API key that has the Users read and write role to sync and provision Customer Area users, roles, and groups. - [Airbase](https://docs.lumos.com/integrations/library/airbase.md): Connect Airbase with API credentials to ingest contract intake records and their documents read-only, since Airbase has no user management API. - [Aircall](https://docs.lumos.com/integrations/library/aircall.md): Connect Aircall over OAuth as an Admin to sync users and permanently delete them at deprovisioning, with no read-only option for this connector. - [Airtable](https://docs.lumos.com/integrations/library/airtable.md): Connect the Airtable Provisioning connector to an Enterprise account over OAuth to sync and provision users, groups, and base and workspace roles. - [Airtable (Classic)](https://docs.lumos.com/integrations/library/airtable-classic.md): Connect the classic Airtable connector to an Enterprise account over OAuth to sync users, entitlement associations, and last activity, and remove users. - [Amplitude](https://docs.lumos.com/integrations/library/amplitude.md): Connect Amplitude on the Enterprise plan with a SCIM token to sync users and delete them or revoke pending invites, with no read-only option. - [Anthropic](https://docs.lumos.com/integrations/library/anthropic.md): Connect Anthropic with an Admin API key for read-only sync of organization users and roles, including pending invites and workspaces. - [Apple App Store](https://docs.lumos.com/integrations/library/apple-app-store.md): Connect Apple App Store Connect with an Admin API key to sync users and roles, and use the Multi-Auth connector to invite, delete, and manage user roles. - [Asana](https://docs.lumos.com/integrations/library/asana.md): Connect Asana with an OAuth app and an optional Service Account Token to sync and provision users, teams, team roles, and licenses, and delete users. - [Atlassian](https://docs.lumos.com/integrations/library/atlassian.md): Connect Atlassian with an unscoped organization Admin API key to sync users, groups, roles and product access, and provision groups, suspensions and deletions. - [Auth0](https://docs.lumos.com/integrations/library/auth0.md): Connect Auth0 with a Machine to Machine app authorized for the Management API to sync users and roles in a read-only integration. - [Avalara](https://docs.lumos.com/integrations/library/avalara.md): Connect Avalara with a username, password and Tenant Identifier to sync users and security roles read-only, in production or sandbox environments. - [BambooHR](https://docs.lumos.com/integrations/library/bamboohr.md): Connect BambooHR with an Enterprise plan admin API key to sync user accounts, suspend users, and use BambooHR as your Source of Truth for employment status. - [Bill.com](https://docs.lumos.com/integrations/library/bill-com.md): Connect Bill.com with a username, password, Organization ID and Developer Key to sync and provision users and roles, with no read-only mode. - [Bitbucket](https://docs.lumos.com/integrations/library/bitbucket.md): Connect Bitbucket Cloud with a scoped API token to sync users, groups and permissions and provision per-user project and repo permissions, or connect read-only. - [Blackline](https://docs.lumos.com/integrations/library/blackline.md): Connect BlackLine with support-issued OAuth credentials and an API key to sync and provision users, entities, roles and teams, with optional team-scoped roles. - [Box](https://docs.lumos.com/integrations/library/box.md): Connect Box as an Admin to provision users, group memberships, and roles, deactivate or delete users, and transfer a departing user's content. - [Braintree](https://docs.lumos.com/integrations/library/braintree.md): Connect Braintree with gateway API credentials to sync users and roles read-only, or use the generic SCIM connector if you need provisioning. - [Brex](https://docs.lumos.com/integrations/library/brex.md): Connect Brex with a read-only users API token from an account or card admin to sync users and roles, in production or the Brex sandbox. - [Buildkite](https://docs.lumos.com/integrations/library/buildkite.md): Connect Buildkite with a Personal Access Token to sync members, roles and teams read-only, or use the Multi-Auth connector to invite members and manage teams. - [Bynder](https://docs.lumos.com/integrations/library/bynder.md): Connect Bynder through an OAuth app as a user with the Manage users permission to sync users, roles and last login, and suspend or deprovision users. - [Calendly](https://docs.lumos.com/integrations/library/calendly.md): Connect Calendly with a customer-created OAuth app as an Admin or Owner to sync users, groups and roles, and invite or remove users, with no read-only option. - [Celigo](https://docs.lumos.com/integrations/library/celigo.md): Connect Celigo with an account-level API token to sync and provision users, global roles and integration roles, with activity tracking and no read-only option. - [Charlie](https://docs.lumos.com/integrations/library/charlie.md): Connect Charlie through Merge.dev as a read-only HRIS source of user data for visibility, Access Reviews and offboarding, optionally as Source of Truth. - [ChartHop](https://docs.lumos.com/integrations/library/charthop.md): Connect ChartHop as a Merge.dev-powered HRIS source with ChartHop Admin permissions to sync employee and user records read-only as a source of user data. - [Checkr](https://docs.lumos.com/integrations/library/checkr.md): Connect Checkr with a SCIM API token and Account ID to sync users and roles into Lumos as a read-only integration. - [Cisco Meraki](https://docs.lumos.com/integrations/library/cisco-meraki.md): Connect Cisco Meraki with a Dashboard API key and organization name to list dashboard users and roles and deprovision users, with no read-only option. - [Cloudflare](https://docs.lumos.com/integrations/library/cloudflare.md): Connect Cloudflare with a custom API Token and Account ID to sync users and account-wide roles, read-only or with invite-based account provisioning. - [Coda](https://docs.lumos.com/integrations/library/coda.md): Connect Coda Enterprise with a SCIM bearer token and Org ID to sync organization users and suspend or deprovision them, with SSO and SCIM required first. - [Contentful](https://docs.lumos.com/integrations/library/contentful.md): Connect Contentful on an Enterprise or Premium plan with your Organization ID to sync organization users and remove their membership when deprovisioned. - [CrowdStrike](https://docs.lumos.com/integrations/library/crowdstrike.md): Connect CrowdStrike Falcon with API client credentials to sync users, roles and last login read-only, or provision users and roles with the Multi-Auth version. - [Cursor](https://docs.lumos.com/integrations/library/cursor.md): Connect Cursor with an Admin API key to sync team members, teams, roles and last login activity in a read-only integration. - [Databricks](https://docs.lumos.com/integrations/library/databricks.md): Connect Databricks with an account admin OAuth service principal to sync and provision users, groups, account roles, repo permissions and workspace assignments. - [dbt Labs](https://docs.lumos.com/integrations/library/dbt-labs.md): Connect dbt Cloud with an Account Admin service token to sync users, groups, roles, licenses and last login read-only, on multi-tenant or single-tenant setups. - [Deel](https://docs.lumos.com/integrations/library/deel.md): Connect Deel through Merge.dev as a Deel admin with API access enabled to sync employee records read-only and optionally use Deel as a source of user data. - [Device42](https://docs.lumos.com/integrations/library/device42.md): Connect Device42 as a Super User with hostname, username and password to sync users, groups and last login in a read-only integration. - [Dialpad](https://docs.lumos.com/integrations/library/dialpad.md): Connect Dialpad as the Company Admin to sync users and admin roles, and suspend or delete Dialpad users for offboarding, with no read-only option. - [DockerHub](https://docs.lumos.com/integrations/library/dockerhub.md): Connect DockerHub with an Admin username, password and organization name to sync users, provision teams and roles, and delete accounts, with no read-only mode. - [DocuSign](https://docs.lumos.com/integrations/library/docusign.md): Connect DocuSign with an OAuth app and the DocuSign Admin product to sync and provision users, groups and permission profiles, and deactivate user memberships. - [Drata](https://docs.lumos.com/integrations/library/drata.md): Connect Drata with a read-scoped API key to sync users and roles into Lumos read-only, choosing the NA or EU region to match the Drata instance. - [Drift](https://docs.lumos.com/integrations/library/drift.md): Connect Drift Premium over OAuth as a Drift Admin to sync users and roles and deprovision users with a SCIM-style delete, with no read-only option. - [Dropbox](https://docs.lumos.com/integrations/library/dropbox.md): Connect Dropbox with a Developer Portal app to sync and provision team members and roles, suspend or remove users, transfer files, or connect read-only. - [Dropbox Sign (HelloSign)](https://docs.lumos.com/integrations/library/dropbox-sign-hellosign.md): Connect Dropbox Sign, formerly HelloSign, by logging in as a team Administrator to list and remove team members, with optional data transfer to a default recipient. - [Duo](https://docs.lumos.com/integrations/library/duo.md): Connect Duo with an Admin API application to sync users, admins, groups, roles and last login, and provision them when the app has write permission grants. - [Egnyte](https://docs.lumos.com/integrations/library/egnyte.md): Connect Egnyte as an Admin over OAuth with one user management scope to sync users, roles and groups and suspend or deprovision users, with no read-only option. - [Evisort](https://docs.lumos.com/integrations/library/evisort.md): Connect Evisort with administrator-created API credentials to list users and entitlements for visibility and Access Reviews in a read-only integration. - [Expensify](https://docs.lumos.com/integrations/library/expensify.md): Connect Expensify with a partnerUserID and secret to sync users, policies and policy roles, with user creation and role assignment on Expensify Provisioning. - [Fastly](https://docs.lumos.com/integrations/library/fastly.md): Connect Fastly with a read-scoped User Token to sync users, roles and last login in a read-only integration, created from the correct Fastly account. - [FireHydrant](https://docs.lumos.com/integrations/library/firehydrant.md): Connect FireHydrant over SCIM with a Write access API key to sync and provision users, groups and roles, with SCIM and an IdP required before connecting. - [Fivetran](https://docs.lumos.com/integrations/library/fivetran.md): Connect Fivetran with a Base64-encoded API key from an Account Administrator to sync users, roles and last login in a read-only integration. - [FloQast](https://docs.lumos.com/integrations/library/floqast.md): Connect FloQast, in Beta, with an API key and region to sync accounts, entitlements and last activity read-only, with no provisioning or deprovisioning. - [Freshteam](https://docs.lumos.com/integrations/library/freshteam.md): Connect Freshteam through Merge.dev to sync employee records read-only and optionally set Freshteam as a source of user data for your organization. - [Front](https://docs.lumos.com/integrations/library/front.md): Connect Front with a Company Admin SCIM bearer token to sync users and Admin or Member roles, and suspend or deprovision users, with no read-only option. - [Gong](https://docs.lumos.com/integrations/library/gong.md): Connect Gong over read-only OAuth as a Technical Administrator with SCIM enabled to sync users, permission profiles, and last activity from audit logs. - [Google Cloud Platform](https://docs.lumos.com/integrations/library/google-cloud-platform.md): Connect a Google Cloud organization with domain-wide delegation and a custom role to sync projects, principals and IAM roles, and assign roles or suspend users. - [Google Drive](https://docs.lumos.com/integrations/library/google-drive.md): Connect Google Drive with a private OAuth app as a Super Admin to sync users, Shared Drives and Drive roles, and provision Drive roles or connect read-only. - [Google Workspace](https://docs.lumos.com/integrations/library/google-workspace.md): Connect Google Workspace through domain-wide delegation to sync users, groups, and roles, discover apps, manage licenses, and run offboarding actions. - [Grafana](https://docs.lumos.com/integrations/library/grafana.md): Connect Grafana with a User administration service account token to sync users, teams, org roles and team roles, and provision org and team roles. - [Grammarly](https://docs.lumos.com/integrations/library/grammarly.md): Connect Grammarly with OAuth 2.0 client credentials to sync users, roles and last activity read-only, or add the write scope so Lumos can delete users. - [Greenhouse](https://docs.lumos.com/integrations/library/greenhouse.md): Connect Greenhouse with a Harvest API key to sync users and roles and suspend users at offboarding, or create the key with GET permissions only for read-only. - [Groove.hq](https://docs.lumos.com/integrations/library/groove-hq.md): Connect Groove.hq with an Owner or Admin API token and subdomain to sync and provision users, roles, groups and mailboxes, and archive or reactivate users. - [Guru](https://docs.lumos.com/integrations/library/guru.md): Connect Guru with an admin API token on the All-in-one or Enterprise plan to sync users and roles and fully delete users, with no read-only option. - [Gusto](https://docs.lumos.com/integrations/library/gusto.md): Connect Gusto through Merge.dev with Full Admin Access to sync users read-only from your HRIS and use Gusto as a Source of Truth for user data. - [HashiCorp Vault](https://docs.lumos.com/integrations/library/hashicorp-vault.md): Connect HashiCorp Vault with a token to sync entities, groups, roles and policies, or use Multi-Auth to also provision entities, groups and policies. - [HiBob](https://docs.lumos.com/integrations/library/hibob.md): Connect HiBob through Merge.dev as an Administrator to sync user records read-only and optionally set HiBob as a Source of Truth for user data. - [HR Partner](https://docs.lumos.com/integrations/library/hr-partner.md): Connect HR Partner through Merge.dev as an Admin to read user data into Lumos and optionally set HR Partner as a Source of Truth, with no provisioning. - [HubSpot](https://docs.lumos.com/integrations/library/hubspot.md): Connect HubSpot Enterprise over OAuth to sync users, roles, teams and login activity, and provision users and roles, or grant only read scopes for read-only. - [incident.io](https://docs.lumos.com/integrations/library/incident-io.md): Connect incident.io with an API key to read users, on-call schedules and current on-call status, as a read-only connector with no provisioning. - [Intercom](https://docs.lumos.com/integrations/library/intercom.md): Connect Intercom with an Access Token to sync admins, teams and workspace access along with last login activity, as a read-only integration. - [Ironclad](https://docs.lumos.com/integrations/library/ironclad.md): Connect Ironclad through Sandbox or Production OAuth as a Company Administrator to sync users and groups read-only and ingest contracts into Found Documents. - [Jamf](https://docs.lumos.com/integrations/library/jamf.md): Connect Jamf Pro with an API Client to sync console users, groups, sites, access levels and privilege sets, manage accounts, and optionally sync devices. - [Jenkins](https://docs.lumos.com/integrations/library/jenkins.md): Connect Jenkins with an admin API token and the Role-based Authorization Strategy plugin to sync users, groups and roles as a read-only integration. - [JetBrains](https://docs.lumos.com/integrations/library/jetbrains.md): Connect JetBrains with an API token and Customer Code to sync licensed users, teams and licenses and manage license assignments, per the token owner's role. - [JFrog](https://docs.lumos.com/integrations/library/jfrog.md): Connect JFrog Cloud with an Admin-scoped access token to sync users, groups, roles, project membership and last login as a read-only integration. - [JumpCloud](https://docs.lumos.com/integrations/library/jumpcloud.md): Connect JumpCloud with an Organization ID and admin API key to sync users, groups and apps, manage group membership, and optionally put Lumos behind SAML SSO. - [Justworks](https://docs.lumos.com/integrations/library/justworks.md): Connect Justworks through Merge.dev to sync employee records read-only, review the Justworks permissions it needs, and optionally use it as a Source of Truth. - [Kallidus](https://docs.lumos.com/integrations/library/kallidus.md): Connect Kallidus through Merge.dev to sync employee records read-only, with no credentials to generate, and optionally use Kallidus as a Source of Truth. - [Kandji](https://docs.lumos.com/integrations/library/kandji.md): Connect Kandji with an API token scoped to List Users and List Devices to sync users, groups and managed devices as a read-only integration. - [KnowBe4](https://docs.lumos.com/integrations/library/knowbe4.md): Connect KnowBe4 with a Reporting API token to sync users, groups, roles and last activity as a read-only integration with no provisioning. - [LastPass](https://docs.lumos.com/integrations/library/lastpass.md): Connect LastPass Business with a Super Admin CID and Provisioning Hash to sync users, admin roles and last login, and create, suspend or delete users. - [LaunchDarkly](https://docs.lumos.com/integrations/library/launchdarkly.md): Connect LaunchDarkly with an Admin service token and Account ID to sync and provision members, global roles and project roles, with no read-only option. - [Looker](https://docs.lumos.com/integrations/library/looker.md): Connect Looker with an Admin API key to sync users, roles and last login, and create, suspend, reactivate or delete users and manage their roles. - [Lucid](https://docs.lumos.com/integrations/library/lucid.md): Connect Lucid or Lucid Government with a SCIM token to sync and provision users and roles, licenses on the multi-auth version, and suspend or delete users. - [Marketo](https://docs.lumos.com/integrations/library/marketo.md): Connect Marketo with an API-only user and Custom Service credentials to sync users, roles and last login, and permanently delete users when deprovisioning. - [Mavenlink (Kantata)](https://docs.lumos.com/integrations/library/mavenlink-kantata.md): Connect Mavenlink (now Kantata OX), in Beta, with OAuth credentials and your account ID to read users, projects, roles, groups and last activity read-only. - [Microsoft 365 / Entra ID](https://docs.lumos.com/integrations/library/microsoft-365-azure-ad-entra-id.md): Connect Microsoft 365 and Microsoft Entra ID to sync and provision users, groups, roles, and licenses, and review the Graph scopes and read-only options. - [Microsoft Dynamics 365](https://docs.lumos.com/integrations/library/microsoft-dynamics-365.md): Connect Microsoft Dynamics 365 with a Microsoft Entra ID app registration to sync users, security roles, teams and privileges, and provision all but privileges. - [Microsoft Teams](https://docs.lumos.com/integrations/library/microsoft-teams.md): Connect Microsoft Teams with a Microsoft Entra app registration to sync and provision Teams licenses, team roles, and channel roles, plus Teams notifications. - [Mixpanel](https://docs.lumos.com/integrations/library/mixpanel.md): Connect Mixpanel Enterprise with an Admin SCIM token to sync users and permanently delete them during offboarding, with no read-only option documented. - [Mode Analytics](https://docs.lumos.com/integrations/library/mode-analytics.md): Connect Mode Analytics with an admin API token to list organization members for Access Reviews and disable a user's membership during offboarding. - [Namely](https://docs.lumos.com/integrations/library/namely.md): Connect Namely through Merge.dev to sync employee records read-only and use Namely as a Source of Truth, with tips for Merge field mapping issues. - [Netskope](https://docs.lumos.com/integrations/library/netskope.md): Connect Netskope with a REST API v2 token and tenant subdomain to sync users, roles, and custom roles read-only, with last activity tracking. - [New Relic](https://docs.lumos.com/integrations/library/new-relic.md): Connect New Relic with an Administrator-created User API key and Authentication Domain ID to sync users, groups, and roles read-only. - [Nmbrs](https://docs.lumos.com/integrations/library/nmbrs.md): Connect Nmbrs through a Merge.dev pop-up to sync employee records read-only and optionally use Nmbrs as a source of user data in Lumos. - [Notion](https://docs.lumos.com/integrations/library/notion.md): Connect Notion Enterprise with a SCIM API token to sync workspace members and deprovision users, with workspace roles brought in by CSV upload. - [Okta](https://docs.lumos.com/integrations/library/okta.md): Connect Okta with an API token or OAuth API Services, put Lumos behind Okta SSO, and set up SCIM provisioning into Lumos and event hooks for live group and app updates. - [OneLogin](https://docs.lumos.com/integrations/library/onelogin.md): Connect OneLogin with a Manage All API credential to sync users, groups, roles, and app assignments, and suspend, downgrade, delete, or change role access. - [OpenAI](https://docs.lumos.com/integrations/library/openai.md): Connect OpenAI with an organization-level Admin API key and Organization ID to sync users, project roles, and roles in read-only mode. - [OpenVPN](https://docs.lumos.com/integrations/library/openvpn.md): Connect OpenVPN with a Cloud API Client ID and Client Secret to sync users and roles, and permanently delete users from OpenVPN during deprovisioning. - [Opsgenie](https://docs.lumos.com/integrations/library/opsgenie.md): Connect Opsgenie with an Admin API key to sync users, teams, and roles read-only and check on-call schedule membership for pre-approval rules. - [Oracle Cloud Fusion (OCI)](https://docs.lumos.com/integrations/library/oracle-cloud-fusion-oci.md): Connect Oracle Cloud Fusion (OCI) with a Confidential Application using client credentials to sync and provision users, groups, applications, and app roles. - [Oracle HCM](https://docs.lumos.com/integrations/library/oracle-hcm.md): Connect Oracle HCM through Merge.dev as a Human Capital Management Application Administrator to sync worker records read-only as a user source. - [Outreach](https://docs.lumos.com/integrations/library/outreach.md): Connect Outreach through OAuth with the users.all scope to sync users, roles, and last login, and suspend users during offboarding and Access Reviews. - [PagerDuty](https://docs.lumos.com/integrations/library/pagerduty.md): Connect PagerDuty through OAuth as a Global Admin or Account Owner to sync and provision users, licenses, roles, and schedules, and delete or transfer data. - [Paychex](https://docs.lumos.com/integrations/library/paychex.md): Connect Paychex through Merge.dev with Admin permissions to sync employee records read-only and optionally set Paychex as a source of user data. - [Paycor](https://docs.lumos.com/integrations/library/paycor.md): Connect Paycor through Merge.dev with an AppCreator account to sync HRIS user data read-only and optionally set Paycor as a source of user data. - [Paylocity](https://docs.lumos.com/integrations/library/paylocity.md): Connect Paylocity through Merge.dev, granting at least the Get Employee permission, to sync HRIS user data read-only and set it as a source of truth. - [PeopleHR](https://docs.lumos.com/integrations/library/peoplehr.md): Connect PeopleHR through Merge.dev with Administrator access to sync user records read-only and optionally set PeopleHR as a source of user data. - [Personio](https://docs.lumos.com/integrations/library/personio.md): Connect Personio through Merge.dev with Administrator permissions to sync HRIS user records read-only and optionally use Personio as a Source of Truth. - [Pingboard](https://docs.lumos.com/integrations/library/pingboard.md): Connect Pingboard with an administrator-issued client credential to sync users and entitlements and deprovision users to reclaim their licenses. - [Pingdom](https://docs.lumos.com/integrations/library/pingdom.md): Connect Pingdom with an Owner-generated Read Access API token to sync users and groups read-only for visibility and Access Reviews. - [Pipedrive](https://docs.lumos.com/integrations/library/pipedrive.md): Connect Pipedrive with an admin API token to sync users, roles, and last activity, and suspend users to reclaim their licenses. - [Postman](https://docs.lumos.com/integrations/library/postman.md): Connect Postman with a team-level API key and a SCIM API key to sync and provision users, groups, and workspace roles, and sync workspaces and last login. - [Ramp](https://docs.lumos.com/integrations/library/ramp.md): Connect Ramp through OAuth as a Ramp Admin to sync users and their role assignments, with business and user read scopes granted to Lumos. - [Rapid7](https://docs.lumos.com/integrations/library/rapid7.md): Connect Rapid7 with a platform administrator's User API Key, Organization ID, and region to sync users, groups, roles, and last login read-only. - [Retool](https://docs.lumos.com/integrations/library/retool.md): Connect Retool Cloud or self-hosted Retool on the Enterprise plan to sync and provision users, roles, groups and resource permissions, or connect read-only. - [RingCentral](https://docs.lumos.com/integrations/library/ringcentral.md): Connect RingCentral through OAuth as a User Admin to sync users and suspend or deprovision them, with read and edit account scopes always requested. - [Rollbar](https://docs.lumos.com/integrations/library/rollbar.md): Connect Rollbar Enterprise with a SCIM token from an Owners Team member to sync users and fully delete Rollbar accounts during deprovisioning. - [Sage HR](https://docs.lumos.com/integrations/library/sage-hr.md): Connect Sage HR through Merge.dev with Administrator or Manager permissions to sync employee data read-only and set Sage HR as a source of user data. - [Sage Intacct](https://docs.lumos.com/integrations/library/sage-intacct.md): Connect Sage Intacct with an OAuth client credentials app and an Admin Web Services user to sync users, groups, and roles read-only. - [Salesforce](https://docs.lumos.com/integrations/library/salesforce.md): Connect Salesforce to sync and provision users, profiles, roles, permission sets, and package licenses, with read-only options and troubleshooting. - [SAP Concur](https://docs.lumos.com/integrations/library/sap-concur.md): Connect SAP Concur with OAuth credentials from SAP Concur Support to sync and provision users, spend roles, product entitlements, and Expense approvers. - [SAP S/4HANA](https://docs.lumos.com/integrations/library/sap-s-4hana.md): Connect on-premise SAP S/4HANA through two SOAP services and a dedicated user to sync users, business roles, and PFCG roles, and grant or remove PFCG roles. - [SAP SuccessFactors](https://docs.lumos.com/integrations/library/sap-successfactors.md): Connect SAP SuccessFactors through Merge.dev to sync employee records read-only and optionally set SuccessFactors as a source of user data in Lumos. - [Segment](https://docs.lumos.com/integrations/library/segment.md): Connect a Segment workspace to Lumos with a Segment Public API token. The Early Access connector validates the connection and doesn't sync data yet. - [SentinelOne](https://docs.lumos.com/integrations/library/sentinelone.md): Connect the Beta SentinelOne integration with an API token and Base URL. Lumos stores the credentials but doesn't sync SentinelOne data yet. - [Sentry](https://docs.lumos.com/integrations/library/sentry.md): Connect Sentry Business with an Org Admin's SCIM token and organization slug to sync members and permanently delete them during deprovisioning. - [ServiceTitan](https://docs.lumos.com/integrations/library/servicetitan.md): Connect ServiceTitan to Lumos with an app's client credentials and app key. The Early Access connector validates the connection and doesn't sync data yet. - [SFTP](https://docs.lumos.com/integrations/library/sftp.md): Connect an SFTP server to ingest file-based data such as invoice or spend records read-only, and learn why a No accounts found error is expected. - [SharePoint](https://docs.lumos.com/integrations/library/sharepoint.md): Connect SharePoint through a Microsoft Entra ID app registration to sync and provision users, groups, site roles, and sites, read-only or with write access. - [Smartsheet](https://docs.lumos.com/integrations/library/smartsheet.md): Connect Smartsheet through OAuth as a System Admin to sync users, roles, and last login, and deprovision, downgrade, or transfer user data at offboarding. - [Snyk](https://docs.lumos.com/integrations/library/snyk.md): Connect Snyk with a Group Admin service account Client ID and Client Secret to sync users, groups, custom roles, and standard roles read-only. - [Splunk (SIEM)](https://docs.lumos.com/integrations/library/splunk-siem.md): Connect Splunk for SIEM logging with an HTTP Event Collector token and host so Lumos events stream to Splunk, with fixes for 404 errors during setup. - [Square Payroll](https://docs.lumos.com/integrations/library/square-payroll.md): Connect Square Payroll through an Admin OAuth login via Merge.dev to sync employee records read-only, noting that roles cannot be synced. - [StrongDM](https://docs.lumos.com/integrations/library/strongdm.md): Connect StrongDM with an Admin-generated API key to sync users, service accounts, and permissions read-only, with last login tracking and troubleshooting. - [Sumo Logic (Roles)](https://docs.lumos.com/integrations/library/sumo-logic-roles.md): Connect Sumo Logic (Roles) with a personal access key to sync and provision users and roles, where the key creator's access sets read-only or provisioning mode. - [Tableau](https://docs.lumos.com/integrations/library/tableau.md): Connect Tableau with a personal access token or Connected App as a Site Administrator to sync and provision users, site roles, and project and workbook access. - [TalentLMS](https://docs.lumos.com/integrations/library/talentlms.md): Connect TalentLMS with a portal-wide API key to sync users and last activity and suspend or deprovision them at offboarding, with no read-only option. - [Tines](https://docs.lumos.com/integrations/library/tines.md): Connect Tines with a Tenant Owner API token to sync users, teams, and roles with last login, as a read-only integration with no provisioning. - [Trello](https://docs.lumos.com/integrations/library/trello.md): Connect Trello with your own Power-Up OAuth key to sync users, memberships, and roles, read-only or with role provisioning and Enterprise user provisioning. - [TriNet](https://docs.lumos.com/integrations/library/trinet.md): Connect TriNet through Merge.dev with Admin permissions to sync user records read-only and optionally set TriNet as a source of user data. - [TriNet HR Platform](https://docs.lumos.com/integrations/library/trinet-hr-platform.md): Connect TriNet HR Platform through Merge.dev with Admin permissions to sync user records read-only and use it as an optional source of user data. - [Twilio](https://docs.lumos.com/integrations/library/twilio.md): Connect Twilio with a Main API key and Account SID to sync subaccounts, last activity, and entitlements, and suspend or close subaccounts at offboarding. - [Twilio Flex](https://docs.lumos.com/integrations/library/twilio-flex.md): Connect Twilio Flex with a Main API key to sync Flex UI users through TaskRouter workers, with roles and last activity, and delete workers to deprovision. - [UKG Ready](https://docs.lumos.com/integrations/library/ukg-ready.md): Connect UKG Ready through Merge.dev as an Administrator to sync user records read-only and optionally use UKG Ready as a Source of Truth. - [Vendr](https://docs.lumos.com/integrations/library/vendr.md): Connect Vendr with administrator API credentials to list users and contracts and suspend accounts by setting them Inactive and downgrading users to Guest. - [Verkada](https://docs.lumos.com/integrations/library/verkada.md): Connect Verkada with an Organization Admin API key, tenant identifier, and region to sync users and access groups as a read-only integration. - [Webex](https://docs.lumos.com/integrations/library/webex.md): Connect Webex through an Admin OAuth popup to sync users and suspend or delete them at deprovisioning, with no read-only connection option. - [Wiz](https://docs.lumos.com/integrations/library/wiz.md): Connect Wiz with a Custom Integration service account over OAuth client credentials to sync users, roles, and last login read-only for Access Reviews. - [Workato](https://docs.lumos.com/integrations/library/workato.md): Connect Workato with an API client token from a Workspace Owner or Admin to sync users, custom and system roles, and workspaces read-only. - [Zapier](https://docs.lumos.com/integrations/library/zapier.md): Connect Zapier Enterprise to Lumos with a SCIM bearer token to sync and provision users and groups, with provisioning required and no read-only mode. - [Zendesk](https://docs.lumos.com/integrations/library/zendesk.md): Connect Zendesk with an OAuth client to sync and provision admins, agents, and groups, sync roles, and optionally log AppStore access requests as ITSM tickets. - [Zip](https://docs.lumos.com/integrations/library/zip.md): Set up the legacy Zip contract ingestion, now being sunset, from Zip's Integration Platform to import contract metadata and documents into Found Documents. - [Zoho People](https://docs.lumos.com/integrations/library/zoho-people.md): Connect Zoho People through an Admin popup login to sync user records from your HRIS read-only, noting that roles cannot be pulled in yet. - [Zoom](https://docs.lumos.com/integrations/library/zoom.md): Connect Zoom to Lumos with a Server-to-Server OAuth app to sync and provision users, groups, roles, licenses and plans, or connect read-only. - [Zuora](https://docs.lumos.com/integrations/library/zuora.md): Connect Zuora with an OAuth client credentials app to sync platform users and global roles read-only, without billing data or provisioning actions. #### Non-Human - [Non-Human Identity Integrations with Lumos](https://docs.lumos.com/integrations/library/non-human/non-human-identity-integrations-with-lumos.md): Learn how read-only NHI integrations build an owned inventory of non-human identities and feed security analyst agents that find exploitable identities. - [Active Directory (NHI)](https://docs.lumos.com/integrations/library/non-human/active-directory-nhi.md): Connect a read-only account to on-prem Active Directory so Lumos can inventory service accounts, managed service accounts, computers and trust accounts, with their credentials and access. - [Anthropic (NHI)](https://docs.lumos.com/integrations/library/non-human/anthropic-nhi.md): Give Lumos read-only access to a Claude Console organization to inventory Anthropic agents, service accounts, API keys, and workspaces as non-human identities. - [AWS IAM (NHI)](https://docs.lumos.com/integrations/library/non-human/aws-iam-nhi.md): Create a read-only IAM role so Lumos can inventory AWS non-human identities and surface risks like over-privileged roles, weak OIDC trust, and unused keys. - [Microsoft Azure (NHI)](https://docs.lumos.com/integrations/library/non-human/azure-nhi.md): Give a read-only Entra app the Reader role so Lumos can inventory Azure managed identities, service principals and agent identities, the workloads they run on, and the RBAC roles they hold. - [Entra ID (NHI)](https://docs.lumos.com/integrations/library/non-human/entra-id-nhi.md): Register a read-only Microsoft Entra ID app so Lumos can inventory service principals, app registrations, and other non-human identities and their risk. - [GitHub (NHI)](https://docs.lumos.com/integrations/library/non-human/github-nhi.md): Connect GitHub (NHI) with an OAuth App and a GitHub App so the NHI security agent can analyze tokens, deploy keys, apps, and runners read-only. - [Google Cloud (NHI)](https://docs.lumos.com/integrations/library/non-human/google-cloud-nhi.md): Connect Lumos to Google Cloud through Workload Identity Federation, with no service account key, to inventory service accounts, their workloads, keys and federation trusts, IAM access and last activity. - [OpenAI (NHI)](https://docs.lumos.com/integrations/library/non-human/openai-nhi.md): Give Lumos read-only access to an OpenAI API Platform organization with an Admin API key to inventory service accounts, keys, projects, roles, and groups. #### 1Password - [1Password Admin](https://docs.lumos.com/integrations/library/1password/1password-admin.md): Connect 1Password through the On-Premise Agent and CLI with admin credentials to sync and provision users, groups, and roles, and deactivate accounts. - [1Password (Groups)](https://docs.lumos.com/integrations/library/1password/1password-groups.md): Connect 1Password through the On-Premise Agent and CLI with a service account token for read-only sync of users and their group memberships. #### AWS - [AWS IAM (Single Account)](https://docs.lumos.com/integrations/library/aws/iam.md): Connect a single AWS account to Lumos through a cross-account IAM role to sync IAM users, groups, roles and policies, read-only or with provisioning. - [Identity Center](https://docs.lumos.com/integrations/library/aws/identity-center.md): Connect AWS IAM Identity Center through an IAM role to sync and provision users, permission sets and groups, with optional SCIM and a read-only option. #### Coupa - [Coupa Contract Ingestion](https://docs.lumos.com/integrations/library/coupa/coupa-contract-ingestion.md): Connect Coupa with an OAuth client credentials app to sync and provision users and user groups and import SaaS contracts into the Lumos Vendors area. - [Coupa](https://docs.lumos.com/integrations/library/coupa/coupa.md): Connect Coupa Software with an OAuth client credentials app to sync and provision users and user groups, with no read-only variant and no contract import. #### Datadog - [Datadog (SIEM)](https://docs.lumos.com/integrations/library/datadog/datadog-siem.md): Connect the legacy Datadog SIEM connector with API and Application keys to sync users and roles, suspend users, track last login, and ship Activity Logs. - [Datadog](https://docs.lumos.com/integrations/library/datadog/datadog.md): Connect Datadog with an API key and scoped Application key to sync and provision users and roles, suspend users, and track last login, with no read-only option. #### Delinea Secret Server - [Delinea Secret Server (On-Premise)](https://docs.lumos.com/integrations/library/delinea-secret-server/delinea-secret-server-on-premise.md): Connect on-premise Delinea Secret Server through the Lumos on-premise agent with a username and password to sync users, roles and secrets read-only. - [Delinea Secret Server Cloud](https://docs.lumos.com/integrations/library/delinea-secret-server/delinea-secret-server-cloud.md): Connect Delinea Secret Server Cloud, in Early Access, with a dedicated service user to sync and provision users, secret permissions, user groups and user roles. #### Freshservice - [FreshService ITSM](https://docs.lumos.com/integrations/library/freshservice/freshservice-itsm.md): Connect Freshservice ITSM with an Account Admin API key to sync users, suspend users, and log a Freshservice ticket for each AppStore access request. - [FreshService Provisioning](https://docs.lumos.com/integrations/library/freshservice/freshservice-provisioning.md): Connect Freshservice Provisioning with a Freshworks OAuth app to sync and provision agents and roles, including create, deactivate, reactivate and delete. #### GitHub - [GitHub](https://docs.lumos.com/integrations/library/github.md): Connect GitHub over OAuth to sync and provision org members, outside collaborators, teams, org roles and repository access, or limit scopes for read-only. - [GitHub Multi-Auth](https://docs.lumos.com/integrations/library/github-multi-auth.md): Connect GitHub organizations through a GitHub App with an App ID and private key to sync and provision members, org, team, repository and enterprise team roles. #### GitLab - [GitLab Token](https://docs.lumos.com/integrations/library/gitlab/gitlab-token.md): Connect a GitLab.com group with an api-scoped personal or group access token to sync and provision users, groups, projects and roles, with no read-only option. - [GitLab Self-Hosted](https://docs.lumos.com/integrations/library/gitlab/gitlab-self-hosted.md): Connect a self-managed GitLab instance with a base URL and an admin personal access token to sync users, groups, projects and roles, and create, block or delete users. - [Gitlab OAuth](https://docs.lumos.com/integrations/library/gitlab/gitlab-oauth.md): Authorize a GitLab.com group over OAuth to sync users, groups, projects and their roles, and provision role changes and invites, with no read-only option. #### Jira - [Jira ITSM](https://docs.lumos.com/integrations/library/jira/jira-itm.md): Connect Jira Cloud or Server to sync users read-only and log AppStore access request tickets, with Jira Cloud comment and status sync and a mail-handler fallback. - [Jira Server](https://docs.lumos.com/integrations/library/jira/jira-server.md): Connect self-hosted Jira Server or Data Center with an admin personal access token to sync and provision users and group memberships, with no read-only option. - [Jira](https://docs.lumos.com/integrations/library/jira/jira.md): Connect Jira Cloud with an admin API token to sync and provision user accounts and group memberships, with no read-only option for this connector. #### Miro - [Miro (Read-Only)](https://docs.lumos.com/integrations/library/miro/miro-read-only.md): Connect the read-only Miro variant over OAuth as a Company Admin on Enterprise to sync users, licenses, org roles, and team and board membership. - [Miro](https://docs.lumos.com/integrations/library/miro/miro.md): Connect Miro Enterprise as a Company Admin to sync users, licenses, org roles, and team and board membership, and provision them through OAuth and SCIM. #### Monday.com - [Monday.com (Basic)](https://docs.lumos.com/integrations/library/monday-com/monday-com-basic.md): Connect Monday.com Basic over OAuth as an admin to sync users, account roles, teams and team roles, and manage team membership and user activation. - [Monday.com (Enterprise)](https://docs.lumos.com/integrations/library/monday-com/monday-com-enterprise.md): Connect Monday.com Enterprise with a SCIM token and Personal API Token to sync users, teams and roles, and provision users, role changes and team membership. - [Monday.com (Deprecated)](https://docs.lumos.com/integrations/library/monday-com/monday-com-deprecated.md): Notes that the pre-July 2025 Monday.com connector is deprecated, points to Basic or Enterprise, and covers its SCIM and GQL API key setup. #### NetSuite - [NetSuite Read-Only](https://docs.lumos.com/integrations/library/netsuite/netsuite-read-only.md): Connect NetSuite Read-Only with token-based authentication to sync employees, roles, and permissions without writing any changes back to NetSuite. - [NetSuite Provisioning](https://docs.lumos.com/integrations/library/netsuite/netsuite-provisioning.md): Connect NetSuite Provisioning with token-based authentication to sync employees, roles, and permissions and create, update, deactivate, or delete users. - [NetSuite (Spend Management) with Contract Ingestion](https://docs.lumos.com/integrations/library/netsuite/netsuite-contract-ingestion.md): Connect the NetSuite (Spend Management) card with Contract Ingestion through token-based authentication to sync employees and roles, import vendor bills as spend, and import contracts from a File Cabinet folder. #### ServiceNow - [ServiceNow ITSM](https://docs.lumos.com/integrations/library/servicenow/servicenow-itsm.md): Connect ServiceNow ITSM through an OAuth client to sync users, roles, and last login read-only and log AppStore access requests as ServiceNow tickets. - [ServiceNow Provisioning](https://docs.lumos.com/integrations/library/servicenow/servicenow-provisioning.md): Connect the ServiceNow User Provisioning connector over OAuth to create, update, suspend, and delete users and manage their role and group assignments. #### Slack - [Slack (Messaging)](https://docs.lumos.com/integrations/library/slack/slack-messaging.md): Connect the Slack (Messaging) app to sync users, roles and user groups, send AppStore notifications and suspend users, or connect read-only. - [Slack User Management](https://docs.lumos.com/integrations/library/slack/slack-user-management.md): Connect the Slack Provisioning OAuth app to sync and provision users, user groups, teams, workspace roles and channels, with SCIM and Enterprise Grid needs. #### Snowflake - [Snowflake Key-Pair Read](https://docs.lumos.com/integrations/library/snowflake/snowflake-key-pair-read.md): Connect Snowflake read-only with key-pair authentication and a dedicated service user to sync users and roles, with optional object-level privilege sync. - [Snowflake Key-Pair Write](https://docs.lumos.com/integrations/library/snowflake/snowflake-key-pair-write.md): Connect Snowflake with key-pair authentication and a dedicated service user to sync and provision users and roles, with optional object-level privilege sync. - [Snowflake PAT](https://docs.lumos.com/integrations/library/snowflake/snowflake-pat.md): Connect Snowflake with a programmatic access token to sync users, roles, privileges, and usage data read-only, including network and token expiry policies. - [Snowflake Multi-Auth](https://docs.lumos.com/integrations/library/snowflake/snowflake-multi-auth.md): Connect Snowflake with a key pair or programmatic access token to sync users, roles, privileges, and usage, read-only or with user and role provisioning. #### UKG - [UKG Pro HRIS](https://docs.lumos.com/integrations/library/ukg/ukg-pro-hris.md): Connect the Merge.dev-powered UKG Pro HRIS card with an Administrator login to sync users and attributes read-only as a source of user data. - [UKG Pro](https://docs.lumos.com/integrations/library/ukg/ukg-pro.md): Connect native UKG Pro (HCM) with a web service account and two API keys to sync users, create new hires, write back emails, and terminate employees. #### Workday - [Workday RaaS](https://docs.lumos.com/integrations/library/workday/workday-raas.md): Connect Workday RaaS to sync workers from custom Workday reports and security groups, with optional security group and account attribute provisioning. - [Workday](https://docs.lumos.com/integrations/library/workday/workday.md): Connect the native Workday connector with an Integration System User and API client to sync workers and security groups and write back email and username.