ZITADEL

Overview

The ZITADEL integration connects one ZITADEL organization to Oneleet, syncing the organization’s users as user account assets and the organization itself as an asset. This lets Oneleet monitor who can sign in through ZITADEL and whether sign-in requires multi-factor authentication.

What does Oneleet monitor?

• ZITADEL users (user accounts), including their administrator roles, whether they’re deactivated, and whether they have a second factor (authenticator app, security key, passkey, or OTP via email or SMS) set up
• Your ZITADEL organization, including whether its login settings force MFA

Setup

To set up the ZITADEL integration, navigate to Integrations > Add integration > ZITADEL.

Oneleet connects with a read-only ZITADEL service account in the organization you want to monitor. Sign in to the ZITADEL Console as an Org Owner of that organization.

1. Go to Users → Service Accounts and select + New. Enter a User Name and a Name, leave Access Token Type as Bearer, and select Create.
2. Go to Organization, select + next to the administrators in the top right, choose the service account, tick Org Owner Viewer only, and select Add.
3. Open the service account again, go to Personal Access Tokens, and select + New. Optionally set an expiration date, select Add, then copy the token. ZITADEL only shows it once.
4. In Oneleet, enter your Instance domain without https:// (for ZITADEL Cloud it looks like <instance>-<id>.<region>.zitadel.cloud, or use your custom domain), paste the Personal Access Token, and click Connect.

To monitor several organizations, connect each one with its own service account.