Skip to main content
JFrog is a DevOps platform for artifact management and software supply chain security. Connect your JFrog instance to Oleria to bring user, group, and role access into your identity and access graph.

​
What Oleria discovers

  • User accounts and profile attributes synced from JFrog’s directory.
  • Groups and their memberships.
  • Roles and permissions assigned to each user.
Oleria uses this data for dormant account detection and access reviews, refreshed on Oleria’s regular sync schedule.

​
Prerequisites

  • Admin access in JFrog with permission to enable SCIM provisioning and generate a SCIM token.
  • A JFrog plan that includes SCIM provisioning.
  • Admin access on the Oleria platform to add a new integration.

​
Get your SCIM credentials from JFrog

1

Enable SCIM provisioning in JFrog

Sign in to JFrog as an admin and turn on SCIM provisioning in its admin settings. JFrog may call this user provisioning or directory sync. Then generate a SCIM token.
2

Copy your SCIM Base URL and Authentication Token

Copy both values before you leave the page - you’ll paste them into Oleria in the next section:
  • SCIM Base URL - the SCIM 2.0 endpoint JFrog shows when you enable provisioning.
  • Authentication Token - the SCIM bearer token.
Copy the token now and store it securely. Rotate it per your organization’s security policy.

​
Connect JFrog to Oleria

1

Open the integration

Go to your Oleria workspace, select Integrations, then select the JFrog tile.
2

Complete the connection form

Fill in the connection form:
3

Save the integration

Select Connect to validate the credentials and save the integration.

​
Verify the integration

Confirm the new instance appears on the Connected tab of your Oleria Integrations page with a status of Healthy. Oleria syncs users, groups, and roles from JFrog on its regular sync schedule once the initial sync completes.
If you regenerate the SCIM token in JFrog, update the Authentication Token in Oleria by editing the integration.

​
Remediation actions

Oleria can also take these actions in JFrog when the SCIM token can update users and groups:
  • Enable or disable a user account
  • Add or remove a user from a group
  • Create a new user or group
Oleria doesn’t check the token’s permissions until an action runs. If an action fails, confirm the token can update users and groups in JFrog.

​
Contact us

For questions about this integration, contact us at support@oleria.com.