Integrations

Connect Your Entire Identity Systems

ELYX connects to identity providers, SaaS applications, PAM tools, HRIS systems, and cloud infrastructure through read-only integrations.

Read-only access

Every integration is strictly read-only. ELYX never modifies, writes to, or affects the state of any connected system.

API-native

Cloud systems connect via their official APIs. On-premises Active Directory uses a small read-only agent.

Identity metadata only

We read identity and access metadata only. No passwords, tokens, file contents, emails, or business data.

Integration Categories

Fifty-plus connectors across five system categories, with new integrations added continuously.

Identity Providers

Directory services & SSO platforms

7+
Microsoft Entra IDOktaActive DirectoryGoogle WorkspaceJumpCloudOneLoginPing Identity

SaaS Applications

Business-critical cloud applications

9+
SalesforceWorkdayServiceNowAtlassianSlackMicrosoft 365GitHubZoomBox

PAM Solutions

Privileged access management

5+
CyberArkBeyondTrustDelineaHashiCorp VaultThycotic

HRIS Systems

HR & workforce data sources

6+
WorkdayBambooHRADPSAP SuccessFactorsRipplingHiBob

Cloud Infrastructure

Cloud IAM & DevOps platforms

6+
AWS IAMAzure ADGoogle Cloud IAMGitHub ActionsGitLabTerraform Cloud

How It Connects

01

Grant read-only access

Provide a service account or OAuth token with read-only scopes. No write permissions, no changes to your systems.

02

ELYX ingests metadata

Our API-native connectors pull identity and access metadata on a continuous schedule. Data is encrypted in transit and at rest.

03

Insights surface immediately

Within hours of connection, ELYX begins surfacing risk, cost waste, and compliance gaps across your connected systems.

What ELYX Reads

Identity and access metadata only. Expand any system to see exactly what data we ingest.

User accounts & attributes
Group memberships
Role assignments
Sign-in activity logs
Conditional access policies
User profiles & lifecycle status
Application assignments
Group memberships
MFA enrollment status
Authentication event logs
User & computer accounts
OU structure & group policy links
Privileged group membership
Last logon timestamps
Password policy settings
User accounts & provisioning status
License tier assignments
Last login & activity data
Admin role assignments
App-specific permission scopes
Privileged account inventory
Credential vault access logs
Session recordings metadata
Just-in-time access grants
Standing privilege assignments
Employee status & department
Job title & manager hierarchy
Hire and termination dates
Contractor and vendor flags
Location & cost center data
IAM roles & policies
Service account inventory
Cross-account access configurations
Privileged resource access
Cloud admin group memberships

Never reads: passwords, authentication tokens, file contents, emails, messages, financial records, or any business data. ELYX ingests identity and access metadata only.

Built on the principle of least privilege

Every ELYX integration is scoped to the minimum permissions required to read identity and access metadata. We never request or store credentials that could allow any write operation or data exfiltration.

Read-only OAuth scopes
Service account with minimal permissions
No lateral movement possible
Full permission manifest available on request

Ready to connect your environment?

We'll walk you through the integration process and show you what ELYX finds in your environment before you commit.

Request a Demo