OneHash

Overview

The OneHash integration connects your OneHash site to Oneleet, syncing system users as user account assets and your site as an asset. This lets Oneleet monitor who has access to your OneHash site and whether they must sign in with two-factor authentication.

What does Oneleet monitor?

• OneHash system users (user accounts), including each user’s roles, whether they’re enabled, and whether two-factor authentication is required for them
• Your OneHash site, including whether two-factor authentication is enabled and required for every user

Website users (customer and supplier portal logins) aren’t synced.

Setup

To set up the OneHash integration, navigate to Integrations > Add integration > OneHash.

Oneleet connects with your site name and the API key and secret of a dedicated user that can only read users, roles, and System Settings. Do these steps as a user with the System Manager role:

1. Copy your site name: the first part of your OneHash URL. For https://yourcompany.onehash.ai, it’s yourcompany.
2. Open Role List, click Add Role, enter a name such as Compliance Reader, leave Desk Access ticked, and click Save.
3. Open Role Permissions Manager. For each of User, Role, and System Settings, add a rule for the new role at permission level 0 with only Read ticked (untick Export, which OneHash ticks on new rules). For User, also add a rule at permission level 1 with only Read ticked.
4. Open User List, click Add User, enter an email address and first name, and click Save. On the Roles & Permissions tab, untick every role except the new one and click Save.
5. On that user’s Settings tab, expand API Access and click Generate Keys. Copy the API Secret, which OneHash shows only once, and the API Key.
6. Paste the three values into the form in Oneleet and click Connect.

The API key can only read what the role allows. Generating keys again replaces the secret and disconnects Oneleet until you update it in Oneleet.