Axiom

Overview

The Axiom integration connects your Axiom organization to Oneleet, syncing organization members as user account assets. This lets Oneleet track who has access to your Axiom organization and with which role.

What does Oneleet monitor?

• Axiom organization members (user accounts), including each member’s role

Axiom has no passwords or two-factor authentication of its own: members sign in with an emailed code, Google, GitHub, or SAML SSO, and Axiom’s API doesn’t report how they sign in. Oneleet therefore can’t check MFA for Axiom members. Enforce MFA in your identity provider instead.

Setup

To set up the Axiom integration, navigate to Integrations > Add integration > Axiom.

Oneleet connects with an Axiom API token that can read users. Create it with an owner or admin account in the organization you want to connect.

1. In Axiom, open Settings → API tokens and click New API token.
2. Enter a name and leave Expiration set to None.
3. Under Token permissions, select Advanced, then Custom. Clear the Ingest permission under All datasets, then under Organization check Read for Users.
4. Click Create, copy the token (it starts with xaat-), paste it into the form in Oneleet, and click Connect.

An API token belongs to one organization, so connect each Axiom organization with its own token. Deleting the token in Axiom disconnects Oneleet until you add a new one.