Skip to main content
Spotfire is an analytics platform for data visualization and exploration. Connect your Spotfire Server to Oleria to bring user and group access into your identity and access graph.

​
What Oleria discovers

  • User accounts and profile attributes synced from Spotfire Server’s user directory.
  • Groups and their memberships.
Oleria uses this data for dormant account detection and access reviews, refreshed on Oleria’s regular sync schedule.

​
Prerequisites

  • Spotfire Server, reachable from the internet over HTTPS.
  • Write access on the computer where Spotfire Server is installed, and the Spotfire configuration tool password.
  • At least one Spotfire Server in the collective running.
  • Admin access on the Oleria platform to add a new integration.
Oleria connects only to hosts it has been set up to reach. Before you connect, contact us at support@oleria.com with your Spotfire Server host name.

​
Get your SCIM credentials from Spotfire

SCIM is turned on by default in Spotfire Server. You register an API client for Oleria and issue it an access token from the Spotfire command line.
1

Register an API client

On the Spotfire Server computer, run register-api-client with the client_credentials grant and the two SCIM scopes listed in Spotfire’s SCIM client registration steps. The command shows the client ID when it completes.
2

Issue an access token

Run issue-access-token with the client ID and the same SCIM scopes. The token is valid for two years unless you set --validity (in hours). You can revoke it with revoke-token.
3

Note your SCIM Base URL

The SCIM base URL has this format, where <domain> is the Spotfire user directory domain (for example, SPOTFIRE):https://<spotfire-server-host>[:<port>]/spotfire/api/rest/scim/v2/<domain>

​
Connect Spotfire to Oleria

1

Open the integration

Go to your Oleria workspace, select Integrations, then select the Spotfire tile.
2

Complete the connection form

Fill in the connection form:
3

Save the integration

Select Connect to validate the credentials and save the integration.

​
Verify the integration

Confirm the new instance appears on the Connected tab of your Oleria Integrations page with a status of Healthy. Oleria syncs users and groups from Spotfire on its regular sync schedule once the initial sync completes.
If you issue a new access token, update the Authentication Token in Oleria by editing the integration.

​
Remediation actions

Oleria can also take these actions in Spotfire when the access token has the SCIM write scope:
  • Enable or disable a user account
  • Add or remove a user from a group
  • Create a new user or group
You can’t use Users & Groups in the Spotfire Server administration UI to update or delete users, groups, or group memberships created through SCIM. Oleria doesn’t check the token’s scopes until an action runs.

​
Known limitations

  • Each Oleria workspace can have one Spotfire connection per Spotfire Server host, even if the server has several user directory domains.

​
Contact us

For questions about this integration, contact us at support@oleria.com.