FOSSA
Overview
Section titled “Overview”The FOSSA integration connects your FOSSA organization to Oneleet, syncing its users and service accounts as user account assets. This lets Oneleet monitor who has access to your FOSSA organization.
What does Oneleet monitor?
Section titled “What does Oneleet monitor?”- FOSSA users and service accounts (user accounts), including each account’s organization role and whether it’s disabled
To set up the FOSSA integration, navigate to Integrations > Add integration > FOSSA.
Oneleet connects with the API token of a FOSSA service account whose role can only list users. Sign in as an organization Admin.
- In FOSSA, go to Settings → Organization → Roles, select Add Role, enter a name (e.g.
User Directory Reader) and description, check only the View users permission, and select Save. - Go to Settings → Integrations → API Service Accounts, enter a username, set Organization Role to the new role, check Create a full API token, and select Create.
- Copy the Full API Token (FOSSA shows it only once), paste it into the form in Oneleet, and click Connect.
Note: The token needs the View users permission. With the built-in Viewer role, FOSSA returns only the service account itself.