Lightspeed Retail (X-Series)

The Lightspeed Retail (X-Series) integration imports the users of your Lightspeed Retail store as user account assets, so they’re included when you review who has access to your systems, and checks that each of them has multi-factor authentication (MFA) turned on.

Connect Lightspeed Retail

Oneleet connects to Lightspeed Retail with OAuth, so you don’t create or paste an API token. Sign in with a user who has the Admin role in the store you’re connecting.

1. In Oneleet, go to Integrations > Add integration > Lightspeed Retail (X-Series) and click Connect.
2. Lightspeed opens and asks you to sign in to your store, then to approve the Oneleet access request.
3. Click Approve installation. Lightspeed sends you back to Oneleet, and the new connection appears on the integration page.

Your users appear in Oneleet a few minutes after the first sync. To monitor more than one store, add a connection for each store.

Oneleet only asks Lightspeed for read access to your users (users:read) and to whether your store uses single sign-on (retailer:read, plus payment_types:read, which Lightspeed requires to read the store). It doesn’t change any store data.

Imported data

For each user, Oneleet imports their name, username, email address, account type and roles, whether they’re enabled or deleted, and whether they’ve set up multi-factor authentication (MFA). Oneleet also imports the store itself, including whether single sign-on (SSO) is turned on.

Monitors

• Lightspeed Retail users have multi-factor authentication enabled fails for each enabled user without multi-factor authentication (MFA). Disabled and deleted users pass, and every user passes when the store signs users in with SSO, since your identity provider then enforces MFA.

Disconnect Lightspeed Retail

Remove the connection from the integration page in Oneleet. You can also revoke Oneleet’s access in Lightspeed Retail under Setup > Add-ons & integrations, which stops Oneleet’s access from the Lightspeed side.