JFrog

Overview

The JFrog integration connects your JFrog Platform instance to Oneleet and syncs its users, so Oneleet can track who has access to your artifact repositories.

What does Oneleet monitor?

• JFrog Platform users, including whether they’re an admin and whether their account is disabled or locked

JFrog’s API doesn’t report whether a user has multi-factor authentication enabled, so Oneleet can’t check it.

Setup

To set up the JFrog integration, navigate to Integrations > Add integration > JFrog and click Continue.

Oneleet requires your JFrog Platform URL and an access token that can read users. Only JFrog Platform Admins can create one.

Creating an access token

1. In the JFrog Platform, open Administration and go to User Management > Access Tokens
2. Click Generate Token and keep Scoped Token selected
3. Enter a Description
4. Set Token scope to Admin. JFrog only lets admin-scoped tokens list other users
5. Leave User name empty to issue the token for yourself, and leave Service set to All
6. Set Expiration time to Never, or choose Custom and enter a number of hours
7. Click Generate and copy the access token. It’s shown only once

For more information, see the JFrog access token documentation.

Connecting to Oneleet

1. Enter your JFrog Platform URL without https://, e.g. mycompany.jfrog.io
2. Paste the access token
3. Click Submit

Oneleet validates the token by querying the JFrog Access API, and creates the connection if the token is valid.