Skip to main content
C1 provides identity governance for Palantir Foundry. Integrate your Foundry stack with C1 for unified visibility and governance over user access.

​
Capabilities

The Palantir connector syncs your Foundry users and groups, and the membership of each group. It supports provisioning: you can grant and revoke group membership for a user, and delete a user. User provisioning is deprovisioning only: Foundry has no create-user API, so the connector cannot create accounts. Deleting a user calls Foundry’s delete-user endpoint. What happens next depends on your Foundry configuration: if Foundry hard-deletes the account, it no longer appears in the sync; if Foundry marks the account deleted instead, it keeps syncing into C1 as a disabled account.
A group can contain both users and other groups. Nested-group members are surfaced as expandable grants, so a user who reaches a group only through a nested group still shows that access in C1.

​
Gather Palantir credentials

You need a Foundry token that carries the admin read and admin write permissions on the organizations you want to govern. Creating that token requires Foundry administrator access.
1
Sign in to your Foundry stack as an administrator and note the stack URL (for example, https://acme.palantirfoundry.com).
2
Create a token for the connector to authenticate with. Use either a personal access token or a service-user token from an OAuth2 client.
3
Grant the token’s principal the admin read and admin write permissions so it can read users and groups and manage group membership.
4
Copy the stack URL and the token. You’ll need both to configure the connector.

​
Configure the Palantir connector

Follow these instructions to use a built-in, no-code connector hosted by C1.
1
In C1, navigate to Apps > Connectors and click Add connector.
2
Search for Palantir and click Add.
3
Choose how to set up the new Palantir connector.
4
Set the owner for this connector.
5
Click Next.
6
Find the Settings area of the page and click Edit.
7
Enter the Palantir credentials:
  • Base URL: Your Foundry stack URL, for example https://acme.palantirfoundry.com.
  • API token: The token you created above.
8
Click Save.
9
The connector’s label changes to Syncing, followed by Connected. You can view the logs to ensure that information is syncing.
Done. Your Palantir connector is now pulling access data into C1.