HCP Terraform

Overview

The HCP Terraform integration connects your HCP Terraform (formerly Terraform Cloud) organizations to Oneleet. It syncs each organization’s members as user account assets, and each organization with its sign-in settings, so Oneleet can monitor who has access and how they authenticate.

What does Oneleet monitor?

• Members of every organization the connected user belongs to, including the teams they’re on
• Whether each member has two-factor authentication enabled
• Whether each organization requires two-factor authentication or uses SAML SSO

Members of an organization that uses SAML SSO pass the two-factor check, because your identity provider handles their sign-in. Invited members who haven’t joined yet and service accounts are skipped.

Setup

To set up the HCP Terraform integration, navigate to Integrations > Add integration > HCP Terraform.

Oneleet connects with a user API token and reads every organization that user belongs to. Create the token as a user on the owners team of each organization you want to monitor:

1. In HCP Terraform, click your user icon and select Account settings.
2. In the sidebar, click Tokens, then click Create an API token.
3. Enter a description such as Oneleet and choose an expiration.
4. Click Create API token and copy the token right away. HCP Terraform only shows it once.
5. Paste the token into the Oneleet setup form.

Oneleet stops syncing when the token expires. Pick a long expiration, or replace the token before it runs out. HCP Terraform emails you 30 days and 7 days before it does.