Skip to content

IM · Beta

SailPoint NERM
API integration

Ship IM features without building the integration. Full SailPoint NERM API access via Proxy, normalized data through Unified APIs, and 170+ MCP-ready tools for AI agents — all extensible to your exact use case.

Built for specific customer use cases. Issues are resolved quickly.

Talk to us
SailPoint NERM

Use Cases

Why integrate with SailPoint NERM

Common scenarios for SaaS companies building SailPoint NERM integrations for their customers.

01

Sync non-employee identities into your SaaS user directory

SaaS companies offering enterprise collaboration, productivity, or IT service tools need a complete view of the workforce — not just full-time employees. Integrating with SailPoint NERM via Truto lets you pull contractors, vendors, and contingent workers into your app alongside HRIS-sourced employees, giving customers a unified user directory.

02

Automate contractor onboarding from your vendor management platform

If your SaaS manages freelancer engagements or vendor relationships, you can push new contractor profiles and contract metadata into NERM to trigger downstream IT provisioning. This turns your platform into the starting point for secure, governed access — a major selling point for enterprise buyers.

03

Enforce real-time deprovisioning when non-employee status changes

Enterprise customers expect that when a contractor is offboarded or a vendor relationship ends, access to your SaaS product is revoked immediately. By reading non-employee lifecycle status from NERM, your app can automatically disable accounts, remove permissions, and maintain audit-ready compliance.

04

Enrich your identity verification workflows with NERM profile data

Background check and identity verification platforms can pull staged non-employee profiles from NERM, run their checks, and write results back — unblocking onboarding workflows inside the customer's identity governance stack without manual intervention.

05

Power role-based access decisions with non-employee context

Security and access management SaaS products can read roles and profile types from NERM to make fine-grained authorization decisions for the extended workforce, ensuring contractors only see what their engagement scope permits.

What You Can Build

Ship these features with Truto + SailPoint NERM

Concrete product features your team can ship faster by leveraging Truto’s SailPoint NERM integration instead of building from scratch.

01

Unified employee + contractor directory

Combine W-2 employees from HRIS integrations and non-employees from SailPoint NERM into a single Users list using Truto's Unified User Directory API, so your app always shows the complete workforce.

02

Automated contractor lifecycle sync

Continuously poll NERM profiles to detect status changes — new hires, role moves, and terminations — and automatically reflect those in your app's user and permissions model.

03

Role-aware access controls for non-employees

Leverage role data from NERM to dynamically scope what contractors and vendors can see or do inside your product, enforcing least-privilege without manual admin work.

04

Non-employee onboarding trigger from your app

When a new vendor or contractor engagement is created in your platform, push the profile into NERM to kick off the customer's governed provisioning workflow — including approvals, background checks, and IT access grants.

05

Contract expiry and offboarding automation

Read contract end-dates and termination statuses from NERM profiles and automatically deactivate user accounts, revoke permissions, and log the action for audit trails inside your SaaS.

06

Compliance-ready non-employee access reports

Surface which non-employees have active access to your product, when they were provisioned, and their current NERM status — giving your enterprise customers audit-ready documentation out of the box.

SuperAI

SailPoint NERM AI agent tools

Comprehensive AI agent toolset with fine-grained control. Integrates with MCP clients like Cursor and Claude, or frameworks like LangChain.

list_all_sail_point_nerm_users

Get users. This endpoint can retrieve users from Lifecycle or you can search for users using parameters. Paginate with limit (max 100) and offset.

get_single_sail_point_nerm_user_by_id

Find user by id. Info for a specific user. Required: id.

create_a_sail_point_nerm_user

Create a new user.

sail_point_nerm_users_bulk_create

Create multiple new users.

sail_point_nerm_users_bulk_update

Update multiple users.

update_a_sail_point_nerm_user_by_id

Update a user by id. The id is the record ID. Required: id.

delete_a_sail_point_nerm_user_by_id

Delete a user. The id is the record ID. Required: id.

list_all_sail_point_nerm_roles

Get roles. This endpoint can retrieve roles from NERM. Optionally you can provide parameters to filter results. Paginate with limit (max 100) and offset.

get_single_sail_point_nerm_role_by_id

Find role by id. Info for a specific user role. Required: id.

sail_point_nerm_roles_bulk_create

Create multiple new roles. Create multiple new users.

sail_point_nerm_roles_bulk_update

Update multiple roles. Update multiple users.

create_a_sail_point_nerm_role

Create a new role.

update_a_sail_point_nerm_role_by_id

Update an existing role. The id is the record ID. Required: id.

list_all_sail_point_nerm_user_roles

Get user role pairings. This endpoint can retrieve user role pairings from Lifecycle or you can search for user role pairings using parameters. Paginate with limit (max 100) and offset.

get_single_sail_point_nerm_user_role_by_id

Find user role pairing. Info for a specific user role pairing. Required: id.

create_a_sail_point_nerm_user_role

Assign new role to user. Assign a new role to a user.

sail_point_nerm_user_roles_bulk_create

Create new user role pairings. Create multiple new user role pairings.

sail_point_nerm_user_roles_bulk_update

Update multiple user role pairings.

update_a_sail_point_nerm_user_role_by_id

Update a user role pairing. Update a user role pairing by id. The id is the record ID. Required: id.

delete_a_sail_point_nerm_user_role_by_id

Delete a user role assignment. The id is the record ID. Required: id.

list_all_sail_point_nerm_system_roles

Get system roles. This endpoint can retrieve system roles from NERM. Optionally you can provide parameters to filter results. Paginate with limit (max 100) and offset.

list_all_sail_point_nerm_ne_attributes

Get attribute data in bulk. This endpoint can retrieve attribute data in bulk from Lifecycle or you can search for attributes using parameters.

create_a_sail_point_nerm_ne_attribute

Create an attribute. This endpoint can create an attribute.

get_single_sail_point_nerm_ne_attribute_by_id

Find attribute data by id. Info for a specific attribute. The id is the record ID or its UID. Required: id.

update_a_sail_point_nerm_ne_attribute_by_id

Update attribute data by id. Update info for a specific attribute. The id is the record ID or its UID. Required: id.

delete_a_sail_point_nerm_ne_attribute_by_id

Delete attribute by id. The id is the record ID or its UID. Required: id.

create_a_sail_point_nerm_ne_attribute_option

Add value to option. Adds a value to an option based attribute.

list_all_sail_point_nerm_ne_attribute_options

Get option based attribute values.

sail_point_nerm_ne_attribute_options_bulk_create

Create multiple option values. Create multiple new option based attribute values.

sail_point_nerm_ne_attribute_options_bulk_update

Update multiple option values. Update multiple option based attribute values.

get_single_sail_point_nerm_ne_attribute_option_by_id

Find option based attribute value. Info for a specific option based attribute value by id. The id is the record ID or its UID. Required: id.

update_a_sail_point_nerm_ne_attribute_option_by_id

Update option based attribute value. Update a option based attribute value by id. The id is the record ID or its UID. Required: id.

delete_a_sail_point_nerm_ne_attribute_option_by_id

Delete option based attribute value. Delete a option based attribute value by id. The id is the record ID or its UID. Required: id.

list_all_sail_point_nerm_advanced_search

Get saved advanced search queries.

create_a_sail_point_nerm_advanced_search

Save an advanced search query. Save an advanced search query for later use.

sail_point_nerm_advanced_search_search

Run profiles advanced search. Run an advanced search for profiles, without saving the query.

update_a_sail_point_nerm_advanced_search_by_id

Update a saved advanced search. Update a saved advanced search query. The id is the record ID. Required: id.

get_single_sail_point_nerm_advanced_search_result_by_id

Run a saved advanced search. Run a saved advanced search query. The id is the record ID. Required: id.

sail_point_nerm_audit_events_search

Query for Audit events. This endpoint provides a search engine for Audit Events by optionally combining subject_type, type, and subject_id to narrow down the audit events. A Subject Type of Profile links up to the AuditableProfile types.

create_a_sail_point_nerm_data_record_reassignment

Reassign data record. Consolidation is a deprecated feature, this endpoint provides a mechanism to reassign a data record to a new master record to assist customers. Required: data_record_id.

delete_a_sail_point_nerm_idproxy_identity_by_id

Delete a master record. Consolidation is a deprecated feature, this endpoint provides a mechanism to delete a master record to assist customers. The id is the record ID. Required: id.

list_all_sail_point_nerm_delegations

List delegations. Returns a list of delegation records, optionally filtered by delegate, delegator, or expiration status.

create_a_sail_point_nerm_delegation

Create a delegation. Create a new delegation record.

get_single_sail_point_nerm_delegation_by_id

Get a single delegation. Returns a single delegation record by its ID. The id is the record ID. Required: id.

update_a_sail_point_nerm_delegation_by_id

Update a delegation. Update an existing delegation record. The id is the record ID. Required: id.

delete_a_sail_point_nerm_delegation_by_id

Delete a delegation. Delete an existing delegation record. The id is the record ID. Required: id.

list_all_sail_point_nerm_forms

Get forms. Get defined forms in the system.

create_a_sail_point_nerm_form

Create a form. This endpoint can create a form.

get_single_sail_point_nerm_form_by_id

Get form data by Id. Info for a specific form. The id is the record ID or its UID. Required: id.

update_a_sail_point_nerm_form_by_id

Update form data by id. Update info for a specific form. The id is the record ID or its UID. Required: id.

delete_a_sail_point_nerm_form_by_id

Delete form by id. The id is the record ID or its UID. Required: id.

list_all_sail_point_nerm_form_attributes

Get form attributes. Get defined form attribute in the system.

create_a_sail_point_nerm_form_attribute

Create a form attribute. This endpoint can create a form attribute.

get_single_sail_point_nerm_form_attribute_by_id

Get form attribute data. Gets info for a specific form attribute by ID. The id is the record ID or its UID. Required: id.

update_a_sail_point_nerm_form_attribute_by_id

Update form attribute data. Update info for a specific form attribute by ID. The id is the record ID or its UID. Required: id.

delete_a_sail_point_nerm_form_attribute_by_id

Delete form attribute. Delete form attribute by id. The id is the record ID or its UID. Required: id.

list_all_sail_point_nerm_identity_proofing_results

Get identity proofing result data. Retrieves identity proofing result data in bulk from Lifecycle.

list_all_sail_point_nerm_isc_accounts

Get Profiles. Retrieve schema-mapped profiles collection. It returns a collection of stored profiles, optionally using schema-mapped field names if requested.

get_single_sail_point_nerm_isc_account_by_id

Get Profile. It returns a single stored profile, optionally with schema-mapped field names. The id is the record ID. Required: id.

update_a_sail_point_nerm_isc_account_by_id

Update Profile. Updates a profile only through ISC schema-mapped attributes, performs a reverse mapping to match the NERM attributes to update. The id is the record ID. Required: id.

list_all_sail_point_nerm_job_status

Get bulk job status. Retrieve the status of a bulk job. Pass the job_id returned by a bulk create/update/delete call. Required: job_id.

update_a_sail_point_nerm_language_by_id

Update a language by locale. The id is the language locale, e.g. en. Required: id, language_locale.

list_all_sail_point_nerm_page_contents

Get page contents data. This endpoint can retrieve page content data.

create_a_sail_point_nerm_page_content

Create a page content entry. This endpoint can create page content.

get_single_sail_point_nerm_page_content_by_id

Find page content record. Info for a specific page content record. The id is the record ID or its UID. Required: id.

update_a_sail_point_nerm_page_content_by_id

Update page content record. Update info for a specific page content record by id. The id is the record ID or its UID. Required: id.

delete_a_sail_point_nerm_page_content_by_id

Delete page content record. Delete page content by id. The id is the record ID or its UID. Required: id.

list_all_sail_point_nerm_page_content_translations

Get page contents translation. This endpoint can retrieve page content translation data.

create_a_sail_point_nerm_page_content_translation

Create page content translation. Create a page content translation record.

get_single_sail_point_nerm_page_content_translation_by_id

Find page content translation. Info for a specific page content translation record by Id. The id is the record ID or its UID. Required: id.

update_a_sail_point_nerm_page_content_translation_by_id

Update page content translation. Update info for a specific page content translation record by id. The id is the record ID or its UID. Required: id.

delete_a_sail_point_nerm_page_content_translation_by_id

Delete page content translation. Delete page content translation by id. The id is the record ID or its UID. Required: id.

create_a_sail_point_nerm_profile_page

Create a profile page.

create_a_sail_point_nerm_workflow_page

Create a workflow page.

list_all_sail_point_nerm_page_elements

Get page element data. Retrieves page elements data.

create_a_sail_point_nerm_page_element

Create a page element entry. Creates a page element.

get_single_sail_point_nerm_page_element_by_id

Find a page element. Info for a specific page element record. The id is the record ID or its UID. Required: id.

update_a_sail_point_nerm_page_element_by_id

Update page element. Update info for a specific page element record by id. The id is the record ID or its UID. Required: id.

delete_a_sail_point_nerm_page_element_by_id

Delete page element. Delete page element by id. The id is the record ID or its UID. Required: id.

create_a_sail_point_nerm_permission

Create a permission. This endpoint can create permissions for Lifecycle, Consolidation, and Collaboration.

create_a_sail_point_nerm_profile

Create a profile.

list_all_sail_point_nerm_profiles

Get profiles.

sail_point_nerm_profiles_bulk_create

Create multiple profiles.

sail_point_nerm_profiles_bulk_update

Update multiple profiles.

sail_point_nerm_profiles_bulk_delete

Delete multiple profiles.

get_single_sail_point_nerm_profile_by_id

Find profile by id. The id is the record ID. Required: id.

update_a_sail_point_nerm_profile_by_id

Update a profile by id. The id is the record ID. Required: id.

delete_a_sail_point_nerm_profile_by_id

Delete a single profile. The id is the record ID. Required: id.

get_single_sail_point_nerm_profile_attachment_by_id

Retrieves profile attribute attachment URL. Retrieves the URL of an attachment attribute value from a profile. The id is the record ID. Required: id, attribute_id.

update_a_sail_point_nerm_profile_attachment_by_id

Uploads profile attachment attribute. Uploads a new attachment attribute value to a profile. Send the file as multipart form data in the file field. The id is the record ID. Required: id, attribute_id.

get_single_sail_point_nerm_profile_avatar_by_id

Retrieves profile avatar URL. Retrieves the URL of the profile avatar. The id is the record ID. Required: id.

update_a_sail_point_nerm_profile_avatar_by_id

Uploads new profile avatar. Uploads a new profile avatar. The id is the record ID. Required: id.

create_a_sail_point_nerm_profile_type

Create a profile type.

list_all_sail_point_nerm_profile_types

Get profile types. Get option based attribute values.

get_single_sail_point_nerm_profile_type_by_id

Find profile type. Find profile type by id. The id is the record ID or its UID. Required: id.

update_a_sail_point_nerm_profile_type_by_id

Update a profile type. Update a profile type by id. The id is the record ID or its UID. Required: id.

delete_a_sail_point_nerm_profile_type_by_id

Delete profile type. Delete a profile type. All profiles of that type must first be destroyed before the profile type can be destroyed. The id is the record ID or its UID. Required: id.

create_a_sail_point_nerm_profile_type_role

Create a profile type role. This endpoint can create a profile type role. NOTE- The ability to toggle Allow/Block is done through the Profile Type.

list_all_sail_point_nerm_profile_type_attributes

profile_types/ne_attributes synced status. Get ne attributes and synced attribute relationship to profile type. Required: profile_type_id.

create_a_sail_point_nerm_synced_attribute

Create a synced attribute. Create synced attribute. Required: profile_type_id.

delete_a_sail_point_nerm_synced_attribute_by_id

Delete synced attribute. Delete a synced attribute. The id is the record ID. Required: id, profile_type_id, ne_attribute_id.

list_all_sail_point_nerm_risk_levels

Get risk level data. This endpoint can retrieve risk level data in bulk from Lifecycle.

get_single_sail_point_nerm_risk_level_by_id

Find risk level data. Find risk level data by id. The id is the record ID. Required: id.

list_all_sail_point_nerm_risk_scores

Get risk score data. This endpoint can retrieve risk score data in bulk from Lifecycle.

get_single_sail_point_nerm_risk_score_by_id

Find risk score data. Find risk score data by id. The id is the record ID. Required: id.

create_a_sail_point_nerm_role_profile

Create a role-profile contributor relationship.

list_all_sail_point_nerm_role_profiles

Get role-profile contributor relationships.

sail_point_nerm_role_profiles_bulk_create

Create multiple role-profile contributor relationships.

sail_point_nerm_role_profiles_bulk_update

Update multiple role-profile contributor relationships.

get_single_sail_point_nerm_role_profile_by_id

Find role-profile contributor relationship. Find role-profile contributor relationship by id. The id is the record ID. Required: id.

update_a_sail_point_nerm_role_profile_by_id

Update a role-profile contributor relationship. Update a role-profile contributor relationship by id. The id is the record ID. Required: id.

delete_a_sail_point_nerm_role_profile_by_id

Delete a role profile assignment. The id is the record ID. Required: id.

create_a_sail_point_nerm_system_role_permission

Create a system role permission. This endpoint can create system role permissions for Lifecycle System Roles.

get_single_sail_point_nerm_user_avatar_by_id

Retrieves URL user avatar. Retrieves the URL of the user avatar. The id is the record ID. Required: id.

update_a_sail_point_nerm_user_avatar_by_id

Uploads new user avatar. Uploads a new user avatar. The id is the record ID. Required: id.

create_a_sail_point_nerm_user_manager

Create a new user-manager relationship.

list_all_sail_point_nerm_user_managers

Get user-manager relationships. This endpoint can retrieve user-manager relationships from Lifecycle or you can search for user-manager relationships using parameters.

sail_point_nerm_user_managers_bulk_create

Create multiple new user-manager relationships.

sail_point_nerm_user_managers_bulk_update

Update multiple user-manager relationships.

get_single_sail_point_nerm_user_manager_by_id

Find user-manager relationship. Info for a specific user-manager relationship. The id is the record ID. Required: id.

update_a_sail_point_nerm_user_manager_by_id

Update a user-manager relationship. Update a user-manager relationship by id. The id is the record ID. Required: id.

create_a_sail_point_nerm_user_profile

Create a user-profile contributor relationship.

list_all_sail_point_nerm_user_profiles

Get user-profile contributor relationships.

sail_point_nerm_user_profiles_bulk_create

Create multiple user-profile contributor relationships.

sail_point_nerm_user_profiles_bulk_update

Update multiple user-profile contributor relationships.

sail_point_nerm_user_profiles_bulk_delete

Delete multiple user-profile contributor relationships.

get_single_sail_point_nerm_user_profile_by_id

Find user-profile contributor relationship. Find user-profile contributor relationship by id. The id is the record ID. Required: id.

update_a_sail_point_nerm_user_profile_by_id

Update a user-profile contributor relationship. Update a user-profile contributor relationship by id. The id is the record ID. Required: id.

delete_a_sail_point_nerm_user_profile_by_id

Delete a user profile assignment. The id is the record ID. Required: id.

create_a_sail_point_nerm_create_workflow

Create a create workflow.

create_a_sail_point_nerm_update_workflow

Create an update workflow.

create_a_sail_point_nerm_batch_workflow

Create a batch workflow.

create_a_sail_point_nerm_automated_workflow

Create an automated workflow.

create_a_sail_point_nerm_registration_workflow

Create a registration workflow.

create_a_sail_point_nerm_login_workflow

Create a login workflow.

create_a_sail_point_nerm_password_reset_workflow

Create a password reset workflow.

create_a_sail_point_nerm_approval_action

Create an approval action. Create an approval action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - workflow_action_performers, workflow_action_roles,.

create_a_sail_point_nerm_ask_security_question_action

Create ask security question action. Create an ask security question action.

create_a_sail_point_nerm_auto_assign_action

Create an auto assign action. Create an auto assign action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - workflow_action_roles.

create_a_sail_point_nerm_batch_update_action

Create a batch update action.

create_a_sail_point_nerm_close_session_action

Create a close session action.

create_a_sail_point_nerm_contributors_action

Create a contributors action. Create a contributors action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - workflow_action_performers,.

create_a_sail_point_nerm_create_profile_action

Create a create profile action.

create_a_sail_point_nerm_duplicate_prevention_action

Create a duplicate prevention action. Create a duplicate prevention action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - duplicatation_prevention_attributes,.

create_a_sail_point_nerm_email_verification_action

Create an email verification action.

create_a_sail_point_nerm_fulfillment_action

Create a fulfillment action. Create a fulfillment action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - workflow_action_performers, workflow_action_roles,.

create_a_sail_point_nerm_identity_proofing_action

Create an identity proofing action. Create an identity proofing action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - identity_proofing_action_configuration,.

create_a_sail_point_nerm_invitation_action

Create an invitation action. Create an invitation action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - workflow_action_pause_action.

create_a_sail_point_nerm_ldap_action

Create a ldap action. Create a ldap action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - workflow_action_performers, workflow_action_roles.

create_a_sail_point_nerm_notification_action

Create a notification action.

create_a_sail_point_nerm_password_reset_action

Create a password reset action.

create_a_sail_point_nerm_profile_check_action

Create a profile check action.

create_a_sail_point_nerm_profile_select_action

Create a profile select action.

create_a_sail_point_nerm_request_action

Create a request action.

create_a_sail_point_nerm_rest_api_action

Create a REST API action. Create a REST API action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - rest_api_action_configuration,.

create_a_sail_point_nerm_review_action

Create a review action. Create a review action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - workflow_action_performer_notification_email.

create_a_sail_point_nerm_run_workflow_action

Create a run workflow action. Create a run workflow action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - configuration_profile_attribute.

create_a_sail_point_nerm_set_attributes_action

Create a set attributes action. Create a set attributes action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - workflow_action_set_attributes.

create_a_sail_point_nerm_set_security_question_action

Create set security question action. Create a set security question action.

create_a_sail_point_nerm_soap_api_action

Create a SOAP API action. Create a SOAP API action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - soap_api_action_configuration,.

create_a_sail_point_nerm_status_change_action

Create a status change action.

create_a_sail_point_nerm_unassign_action

Create an unassign action. Create an unassign action. The following supporting objects will need to be created after this action is created (which are tied together via workflow_action_id) - workflow_action_roles.

create_a_sail_point_nerm_update_profile_action

Create an update profile action.

create_a_sail_point_nerm_username_password_action

Create a username password action.

list_all_sail_point_nerm_workflow_actions

Get Workflow Actions. This endpoint can retrieve workflow actions.

create_a_sail_point_nerm_workflow_action_performer

Create a workflow action performer. Create a workflow action performer for an existing workflow action.

list_all_sail_point_nerm_workflow_sessions

Get workflow sessions.

create_a_sail_point_nerm_workflow_session

Create a workflow session.

get_single_sail_point_nerm_workflow_session_by_id

Find workflow session. Find workflow session by id. The id is the record ID. Required: id.

update_a_sail_point_nerm_workflow_session_by_id

Update a workflow session. Update a workflow session by id. The id is the record ID. Required: id.

get_single_sail_point_nerm_workflow_session_attachment_by_id

Retrieves workflow session attachment URL. Retrieves the URL of an attachment attribute value from a workflow session. The id is the record ID. Required: id, attribute_id.

update_a_sail_point_nerm_workflow_session_attachment_by_id

Uploads workflow session attachment. Uploads a new attachment attribute value to a workflow session. Send the file as multipart form data in the file field. The id is the record ID. Required: id, attribute_id.

Why Truto

Why use Truto’s MCP server for SailPoint NERM

Other MCP servers give you a static tool list for one app. Truto gives you a managed, multi-tenant MCP infrastructure across 1050+ integrations.

01

Auto-generated, always up to date

Tools are dynamically generated from curated documentation — not hand-coded. As integrations evolve, tools stay current without manual maintenance.

02

Fine-grained access control

Scope each MCP server to read-only, write-only, specific methods, or tagged tool groups. Expose only what your AI agent needs — nothing more.

03

Multi-tenant by design

Each MCP server is scoped to a single connected account with its own credentials. The URL itself is the auth token — no shared secrets, no credential leaking across tenants.

04

Works with every MCP client

Standard JSON-RPC 2.0 protocol. Paste the URL into Claude, ChatGPT, Cursor, or any MCP-compatible agent framework — tools are discovered automatically.

05

Built-in auth, rate limits, and error handling

Tool calls execute through Truto’s proxy layer with automatic OAuth refresh, rate-limit handling, and normalized error responses. No raw API plumbing in your agent.

06

Expiring and auditable servers

Create time-limited MCP servers for contractors or automated workflows. Optional dual-auth requires both the URL and a Truto API token for high-security environments.

Unified APIs

Unified APIs for SailPoint NERM

Skip writing code for every integration. Use Truto’s category-specific Unified APIs out of the box or customize the mappings with AI.

Unified User Directory API

Roles

The Role object represents a role of a User.

View Docs

Users

The User object represents a User.

View Docs

How It Works

From zero to integrated

Start with SailPoint NERM in a free sandbox, usually ready within one business day. No boilerplate, no maintenance burden.

01

Link your customer’s SailPoint NERM account

Use Truto’s frontend SDK to connect your customer’s SailPoint NERM account. We handle all OAuth and API key flows — you don’t need to create the OAuth app.

02

We handle authentication

Don’t spend time refreshing access tokens or figuring out secure storage. We handle it and inject credentials into every API request.

03

Call our API, we call SailPoint NERM

Truto’s Proxy API is a 1-to-1 mapping of the SailPoint NERM API. You call us, we call SailPoint NERM, and pass the response back in the same cycle.

04

Unified response format

Every response follows a single format across all integrations. We translate SailPoint NERM’s pagination into unified cursor-based pagination. Data is always in the result attribute.

FAQs

Common questions about SailPoint NERM on Truto

Authentication, rate limits, data freshness, and everything else you need to know before you integrate.

How does authentication work with SailPoint NERM?

NERM's REST API uses token-based authentication via Personal Access Tokens (PATs) generated in SailPoint Identity Security Cloud. Truto handles token management and auth configuration so your end users can connect their NERM instance without your team building custom auth flows.

What data can I access through Truto's Unified User Directory API for NERM?

The Unified User Directory API maps to NERM's Users and Roles. This lets you read non-employee profiles (contractors, vendors, bots, etc.) and their associated roles. Since NERM profiles are highly customizable and can represent assignments, cost centers, or vendor companies, the exact schema depends on how the customer has configured their profile types.

How does pagination work when fetching large sets of non-employee profiles?

NERM's API uses cursor-based pagination with limit, offset, and metadata next parameters. Truto abstracts this so you get a consistent pagination interface regardless of the underlying API mechanics — important for enterprise customers with tens of thousands of non-employee records.

Are specific NERM tools available in Truto today?

SailPoint NERM tools in Truto are built on request. If you need this integration, reach out to the Truto team and they will build and ship the specific endpoints and data mappings you need — typically covering profiles, profile types, and workflow sessions.

Can I write data back to NERM, or is it read-only?

NERM's REST API supports GET, POST, and PATCH operations on profiles and can trigger workflow sessions. Write-back capabilities — such as pushing new contractor profiles or updating custom attributes like background check status — can be built as part of your Truto integration on request.

Does NERM support webhooks for real-time event notifications?

Yes, NERM supports outbound webhooks (requiring TLS 1.2+) that fire on lifecycle events like status changes or contract expirations. This enables event-driven patterns such as instant deprovisioning when a contractor is terminated, complementing the polling approach via Truto's Unified API.

SailPoint NERM

Get SailPoint NERM integrated into your app

Our team understands what it takes to make a SailPoint NERM integration successful. A short, crisp 30 minute call with folks who understand the problem.