Skip to main content
This page helps you pick the right way to connect a system to Lumos. Setup steps live on each method’s own page, linked below.

Work down this list

Check the options in this order: 1. Check the Integration Library. If Lumos has a dedicated connector for your app, use it. Dedicated connectors are built and maintained by Lumos, and give you the most capabilities with the least setup. Search for your app in the Integration Library in the sidebar. 2. Match a generic connector. If your system uses a standard protocol or exposes its data in a standard way, one of the generic connectors will fit. Use the table below to match your system to a method. 3. Build with the Connector SDK. If your system has an API but no connector fits, you can build one with the Connector SDK. This takes development work, but gives you the same lifecycle management as a dedicated connector. 4. Fall back to Manual Tasks. If the system has no API, no database access, and no export, Lumos can still govern it. Manual Tasks route provisioning work to a person and track it to completion, so the system stays in your governance and audit trail.

Matching a generic connector

Where connectors run. Lumos must be able to reach the system. Anything not reachable from the internet, such as a domain controller or an internal database, connects through the On-Premise Agent installed in your network. The “Runs from” column tells you when you need it.
Many integrations can run in a read-only mode with fewer permissions. Each connector page lists what read-only needs and what you give up.

Examples

A SaaS app, like Salesforce. Search the Integration Library. A dedicated Salesforce connector exists, so use it. A homegrown app backed by PostgreSQL. There’s no dedicated connector, but its users and roles live in Postgres tables. Use the Database connector. You write SQL queries against your schema, and Lumos syncs accounts and entitlements from the results. If the database is on your internal network, it connects through the on-premise agent. Add write queries later if you want Lumos to provision access too. A vendor app with no API. The admin portal can export users as a CSV, and changes are made by hand in the UI. Use Flatfile to sync the export on a schedule, and Manual Tasks to route provisioning requests to the app’s admin and track them.