Infisical

Overview

The Infisical integration connects your Infisical organization to Oneleet, syncing organization members as user account assets. This lets Oneleet monitor who has access to your Infisical organization.

What does Oneleet monitor?

• Infisical organization members (user accounts), including pending invitations, each member’s organization role, and whether the membership is active

Infisical doesn’t report whether individual users have MFA set up, so user accounts show MFA as unknown.

Setup

To set up the Infisical integration, navigate to Integrations > Add integration > Infisical.

Oneleet connects with an Infisical machine identity using Universal Auth. You need the organization Admin role to create one.

1. In Infisical, open Access Control → Machine Identities and click Create.
2. Name the identity (e.g. Security posture monitoring), choose the Member role, and click Create.
3. Under Authentication, open the ⋯ menu next to Universal Auth, choose View Auth Method, and copy the Client ID.
4. Click Add Client Secret, then Create, and copy the client secret.
5. In Oneleet, enter your instance hostname (app.infisical.com, eu.infisical.com, or your self-hosted hostname), the Client ID, and the Client Secret, and click Connect.

Deleting the machine identity or revoking its client secret disconnects Oneleet until you update the credentials.