Integration Settings
Integration Settings allow administrators to establish and maintain the connection between Hydden.Control and your Hydden platform instance (Discovery or Observability). This connection is required for data synchronization and identity governance operations.
Overview
Hydden.Control uses OAuth 2.0 to securely connect to your Hydden platform. Once configured, this integration enables:
- Automatic synchronization of identity data (accounts, owners, groups, applications)
- Access to identity insights and risk assessments
- Coordination between access reviews and your identity data sources
Prerequisites
Before configuring integration settings, you need:
- A Hydden Discovery or Hydden Observability instance URL
- OAuth 2.0 client credentials (Client ID and Client Secret) from your Hydden platform
- Administrator access to Hydden.Control
Obtaining Credentials
Contact your Hydden platform administrator to obtain the OAuth 2.0 client credentials needed for this integration.
Configuring the Integration
- Navigate to Settings and select the Integration tab.
- Enter the Hydden URL - the base URL of your Hydden platform instance (e.g.,
https://your-instance.hydden.io). - Enter the Client ID - your OAuth 2.0 client identifier.
- Enter the Client Secret - your OAuth 2.0 client secret.
- Select the Target Platform:
- Discovery - Connect to Hydden.Discovery for identity data
- Observability - Connect to Hydden.Observability for monitoring data
- Click Save Changes.
Validation
After saving, Hydden.Control validates the connection by:
- Verifying the URL is reachable
- Authenticating with the provided credentials
- Confirming access to the target platform
If validation fails, an error message indicates the issue. Common problems include:
| Error | Cause | Solution |
|---|---|---|
| Connection failed | URL unreachable | Verify the Hydden URL is correct and accessible |
| Authentication failed | Invalid credentials | Confirm Client ID and Secret are correct |
| Authorization failed | Insufficient permissions | Ensure the OAuth client has appropriate scopes |
Unsaved Changes
If you navigate away from the Integration tab with unsaved changes, a confirmation dialog appears asking whether to discard changes or stay on the page.
Security Considerations
- Client secrets are stored securely and encrypted at rest
- Credentials are transmitted over HTTPS only
- Integration settings can only be modified by administrators
- Consider rotating client secrets periodically as a security best practice
Next Steps
After configuring the integration:
- Go to Data Sync to synchronize your identity data
- Review the synchronized data in the Identity section
- Configure Role Configuration to generate roles from owner attributes
Related Topics
- Data Sync - Synchronize identity data
- Settings Overview - All Settings options
- Onboarding - Initial setup guide