Team Password Manager

Overview

The Team Password Manager integration connects your self-hosted Team Password Manager instance to Oneleet and syncs its users as user account assets, so Oneleet can monitor who has access to your shared passwords.

What does Oneleet monitor?

• Team Password Manager users (user accounts), including each user’s role
• Inactive users, shown as deactivated accounts
• Whether each user has two-factor authentication enabled. SAML users are treated as passing because their identity provider handles MFA, and inactive and API only users are skipped.

Setup

To set up the Team Password Manager integration, navigate to Integrations > Add integration > Team Password Manager.

Your instance must be reachable from the internet over HTTPS. Oneleet connects to the Team Password Manager API with the username and password of an API only user, which an admin sets up:

1. In Team Password Manager, go to Settings > API. If API access is disabled, click Enable API access.
2. Go to Users / Groups > New User and create a user with the IT role.
3. On the new user’s page, click Set as API only User.
4. In the Oneleet setup form, enter the domain you open Team Password Manager at without https:// (e.g. tpm.example.com, including any path it’s installed under), and the API user’s username and password.