Apollo GraphQL
Overview
Section titled “Overview”The Apollo GraphQL integration connects your Apollo GraphOS organizations to Oneleet through the GraphOS Platform API. It syncs each organization’s members as user account assets, with their organization roles, and each organization as an asset.
What does Oneleet monitor?
Section titled “What does Oneleet monitor?”- GraphOS organization members (user accounts), with one role per organization they belong to, e.g.
acme:ORG_ADMIN - GraphOS organizations, including their Studio session duration
To set up the Apollo GraphQL integration, navigate to Integrations > Add integration > Apollo GraphQL.
Oneleet connects with a GraphOS personal API key. A personal API key has the same permissions as the user who creates it, so Oneleet syncs every organization that user is a member of. Use an account that belongs to the organizations you want to monitor.
- Sign in to GraphOS Studio.
- Open your user menu in the top right and select Personal Settings.
- Select API Keys in the left navigation and click Create new key.
- Enter a name for the key and click Create.
- Copy the key, which starts with
user:, paste it into the form in Oneleet, and click Connect.
Graph, subgraph, variant, operator, and SCIM keys aren’t tied to a user and can’t list organization members, so Oneleet only accepts personal API keys. Deleting the key in GraphOS Studio disconnects Oneleet until you update the key in Oneleet.
Limitations
Section titled “Limitations”The GraphOS Platform API doesn’t expose whether members have two-factor authentication enabled or whether an organization enforces SSO, so Oneleet shows two-factor status as unknown for Apollo GraphQL accounts.