> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oleria.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Wiz

> Connect your Wiz organization to Oleria to continuously discover user and role access across your cloud security platform.

Wiz is a cloud security platform for identifying and prioritizing cloud risk. Connect your Wiz organization to Oleria to bring user and role access into your identity and access graph, without a dedicated Wiz-specific integration.

## What Oleria discovers

* User accounts and profile attributes synced from your Wiz organization.
* Roles assigned to each user.

Oleria uses this data for dormant account detection and access reviews, refreshed on Wiz's standard sync schedule.

## Prerequisites

* Admin access in Wiz with permission to create a service account.
* Admin access on the Oleria platform to add a new integration.

<Note>
  The exact location of these settings can change over time. If the steps below don't match what you see, refer to Wiz's own API documentation.
</Note>

## Get your SCIM credentials from Wiz

<Steps>
  <Step title="Create a service account in Wiz">
    Sign in to Wiz as an admin, go to **Settings** → **Service Accounts**, and create a service account with read-only permissions.
  </Step>

  <Step title="Copy your SCIM Base URL and Authentication token">
    Copy both values before you leave the page - you'll paste them into Oleria in the next section:

    * **SCIM Base URL** - the HTTPS API endpoint for your Wiz tenant.
    * **Authentication token** - the credential issued for the service account.

    <Note>
      Copy the credential now. Many applications display it only once. Store it securely and rotate it per your organization's security policy.
    </Note>
  </Step>
</Steps>

## Connect Wiz to Oleria

<Steps>
  <Step title="Open the integration">
    Go to your Oleria workspace, select **Integrations**, then select the **Wiz** tile.
  </Step>

  <Step title="Complete the connection form">
    Select **Continue** and fill in the connection form:

    | Field                | Notes                                                                              |
    | :------------------- | :--------------------------------------------------------------------------------- |
    | Instance name        | Optional. Short, recognizable label for this connection (for example, `wiz-prod`). |
    | SCIM Base URL        | Required. The HTTPS API endpoint copied from Wiz.                                  |
    | Authentication token | Required. The service account credential issued by Wiz.                            |
  </Step>

  <Step title="Save the integration">
    Select **Connect** to validate the credentials and save the integration.
  </Step>
</Steps>

## Verify the integration

Confirm the new instance appears in your Oleria workspace under **Connected Integrations** with a status of **Healthy**. Oleria syncs users and roles from Wiz on the standard SCIM provisioning schedule once the initial sync completes.

<Note>
  If Wiz rotates your service account credential, update the Authentication token in Oleria by editing the integration.
</Note>

## Governance actions

Oleria can also invoke lifecycle actions in Wiz when the credential you provide has write access:

* Enable or disable a user account
* Create a new user

<Note>
  Many teams start with a read-only service account for visibility, then grant write access once they're ready to automate remediation in Wiz.
</Note>

## Contact us

For questions about this integration, contact us at [support@oleria.com](mailto:support@oleria.com).