OpenVPN CloudConnexa

Overview

The OpenVPN CloudConnexa integration connects your CloudConnexa organization to Oneleet. It syncs your users as user account assets and your organization’s sign-in settings as an asset, so Oneleet can monitor who has VPN access and whether two-factor authentication is required.

What does Oneleet monitor?

• CloudConnexa users (user accounts), including their role and whether they’re suspended
• Whether your organization requires two-factor authentication

CloudConnexa’s API doesn’t say whether each user has enrolled in two-factor authentication, so Oneleet shows it as unknown for CloudConnexa accounts. The organization’s two-factor setting covers CloudConnexa (email and password) and LDAP sign-in. If your users sign in with SAML, require MFA in your identity provider.

Setup

To set up the integration, navigate to Integrations > Add integration > OpenVPN CloudConnexa. Use a CloudConnexa account with the Owner role.

1. Find your Cloud ID: it’s the subdomain of your Administration portal. For https://acme.openvpn.com, the Cloud ID is acme.
2. In the Administration portal, go to API & Logs > API and click Create Credentials.
3. Enter a name, select a lifetime, and set Settings and User to Read Only. Oneleet doesn’t need any other access.
4. Click Create, then copy the Client ID and Client Secret into the form in Oneleet and click Connect.

API credentials expire at the end of their lifetime. Create new credentials and reconnect the integration before then to keep syncing.

See CloudConnexa’s guide to creating API credentials.