Passwork

Overview

The Passwork integration connects your Passwork organization to Oneleet, syncing your users as user account assets and your roles with their authentication settings. This lets Oneleet monitor who has access to Passwork and how they sign in.

What does Oneleet monitor?

• Passwork users (user accounts), including each user’s role and whether they have two-factor authentication (2FA) enabled
• Whether each Passwork role that has users requires 2FA

Setup

To set up the Passwork integration, navigate to Integrations > Add integration > Passwork.

Oneleet connects with the Passwork API using a read-only service account. Sign in to Passwork as an owner or administrator.

1. Open Settings and users > User management, select the Roles tab, and click Create role. Turn on only View User management and View role permissions and settings.
2. In the role’s Authentication section, set Access token lifetime (in minutes) to 525600 (1 year) and Refresh token lifetime to 525660, then click Save.
3. In the Users tab, click Create service account, select the new role, and copy the master key hash Passwork shows.
4. Open the service account, click API tokens > Create API token, and copy the access token.
5. Enter your Passwork domain, the master key hash, and the access token in Oneleet and click Connect.

Oneleet stores only the master key hash, never the master key, so it can’t decrypt any of your vault data. Oneleet doesn’t refresh the access token, so create a new token and update the connection before it expires.