Exoscale

Overview

The Exoscale integration connects your Exoscale organization to Oneleet, syncing organization users as user account assets. This lets Oneleet monitor who has access to your Exoscale organization and whether they protect their sign-in with two-factor authentication.

What does Oneleet monitor?

• Exoscale organization users (user accounts), including each user’s IAM role
• Whether each user has two-factor authentication enabled

Exoscale doesn’t let administrators require two-factor authentication for a whole organization, so each user turns it on for their own account. Users who sign in through SSO are treated as having two-factor authentication, since your identity provider handles it.

Setup

To set up the Exoscale integration, navigate to Integrations > Add integration > Exoscale.

Oneleet connects with an Exoscale IAM API key bound to a read-only role. Sign in as an Owner or another user allowed to manage IAM.

1. In the Exoscale Portal, open Security → IAM Roles and click Add.
2. Name the role, leave Default service strategy set to Deny, add the iam service class with Rules as its strategy, and add one allow rule with the expression operation in ['list-users', 'list-iam-roles']. Click Create.
3. Open Security → IAM API Keys, click Add, select the role you just created, and click Create.
4. Copy the Key and the Secret (shown only once) into the Oneleet form as API Key and API Secret, and click Connect.

Deleting the API key or its role disconnects Oneleet until you create a new key and update it in Oneleet.