Keeper Integration
This guide will show you how to setup an integration with Keeper and Indent. Once complete, you can securely grant access to password vaults, shared folders, and other Keeper resources.
Through API magic, Indent securely grants access to just about any service. Keeper is a good integration if you want improve your org's security.
What can I do with Keeper + Indent?
- Streamline onboarding new hires
- Standardize permissions across roles
- Holistically transfer permissions when an employee moves to a new role
- Securely offboard users by instantly revoking access
Keeper is one of a few password managers integrated with Indent. Other password managers like 1Password are also available. If you'd like us to add another password manager send us a request.
Components
- Okta
- Keeper Enterprise
- Google Groups Integration
- Keeper Enterprise
- Okta Groups Integration
Installation
This guide uses an identity provider (like Google or Okta) to connect with Keeper Enterprise. Indent is used to grant temporary (or permanent) access to those groups, and automatically collects evidence your org needs for audits and compliance.
The integration between Google/Okta and Keeper will then grant access to passwords, secrets, shared folders, and other Keeper resources.
1. Setup your Identity Provider
- Okta
- Open the Google Groups docs
- Follow the Configuration instructions
- Test your integration with the guide's Using Indent + Google Groups instructions
- Open the Indent + Okta docs
- Follow the Configuration instructions
- Test your integration with the guide's Using Indent + Okta Groups instructions
2. Follow the SCIM Bridge Guide
- Okta
- Follow the Keeper guide for Google Workspace Provisioning with SCIM docs
- Note: the Keeper docs linked here are an overview
- The specific link to follow is at the bottom of the overview page, and named something like Google Workspace + Keeper SSO Cloud
- Follow the Keeper guide for Okta Provisioning with SCIM docs
3. Check that Provisioning Succeeded
- Okta
- Check that Keeper's instructions for Team and User Approvals were followed
- This step must be done in order for your integration to work
- Check that Keeper's instructions for Provisioning were followed
- This step must be done in order for your integration to work
4. Integrate Teams and Users with Keeper
Keeper is a suite of products. Other products include their Secrets Manager and Connection Manager.
This guide helps you setup Keeper Enterprise, which works with these other products. As an example, if you're also a user of Keeper Connection Manager, you may want to also consider using Keeper + Indent for requesting temporary and secure access to those connections.
The docs for Secrets Manager and Connection Manager are the place to check for more info on those integrations. Since Indent integrates through Google or Okta, we automatically work with any Keeper solutions that accept them as an Identity Provider.
Interactive Demo
In the following example, you're logged in as Fouad and can request access to an Okta Group. In real usage, you would want an Okta Group linked with a Keeper resource. Requesting access to the Okta Group through Indent gives you the ability to grant secure, on-demand, and auto-expiring access to vaults with sensitive passwords. Indent can also be used for new employees to self-serve requests for permanent access during onboarding.
Try submitting and approving a request:
Summary
Congrats! You added the Keeper + Indent integration. Your employees can now securely request access to credentials. Indent will automatically record an audit log, and auto-expire access after a time period of your choosing.
Next, check out the Integrations page page for other services your teams want to request. If there's a new integration you'd like to see, request a new one. You might be ready to start inviting others to try Indent. If that's the case, you'll want to send them docs on how to make a request. You and anyone approving requests should read more about approving and declining requests.
Questions
Why can't I see my Groups in Indent?
You might need to sync Okta Groups or Google Workspaces with Indent. Try visiting the Resources section in your Indent dashboard, and clicking Pull Updates.
Why can't I see my Groups in Keeper?
If you are unable to find your Okta or Google info in your Keeper dashboard, you may need to re-read the Provisioning sections of the guides linked to in Step 2 of the Installation.
Can Indent host the integration for me?
Sure! We can host the integration on an single-tenant AWS account. That's a popular way to do an initial setup while your teams test out Indent. To start that process, contact Indent Support
How do I ask for help?
If you have questions or need help with your integration, try chatting with Indent Support.