Xata
Overview
Section titled “Overview”The Xata integration connects your Xata organization to Oneleet, syncing your organization’s members as user account assets and the organization itself as an asset. This lets Oneleet monitor who has access to your Xata databases and whether sign-in goes through your identity provider.
What does Oneleet monitor?
Section titled “What does Oneleet monitor?”- Xata organization members (user accounts), including each member’s role
- Your Xata organization, including whether single sign-on (SSO) is enforced for every current member’s email domain
Xata’s API doesn’t report whether individual members use two-factor authentication, so Oneleet doesn’t monitor it.
To set up the Xata integration, navigate to Integrations > Add integration > Xata.
Oneleet connects with your Xata Organization ID and an organization API key. Only an organization Admin can create API keys.
- In the Xata console, open Organization Settings → General and copy the Organization ID.
- Open Organization Settings → API keys and select New API Key.
- Enter a name, leave Expiration set to No expiration, set Organization to Read-only, and leave every other scope at No access.
- Select Create API key and copy the key. Xata shows it only once.
- Paste the Organization ID and API key into the form in Oneleet and click Connect.
Revoking or deleting the key in Xata disconnects Oneleet until you enter a new one.
Single sign-on
Section titled “Single sign-on”SSO is a paid add-on in Xata. Until it’s enabled for your organization, Oneleet reports the SSO monitor as failing. See Xata’s SSO documentation for how to enable and enforce it.
Require SSO for every domain used by your organization’s members, including external collaborators. Subdomains need their own configuration. The monitor won’t pass if we can’t determine a member’s email domain or no members are returned.