Onboard a MongoDB Atlas App to SSPM

1. Create a service account in MongoDB Atlas and save its credentials.

   A MongoDB Atlas service account is a non-human, programmatic identity that SSPM will use to scan your MongoDB organization. When you create a service account, MongoDB Atlas generates and displays the programmatic credentials (Client ID and Client Secret) that SSPM will use to access information about your organization.

   By following these steps, you onboard only one MongoDB Atlas organization to SSPM. If you want SSPM to scan for multiple organizations, you can onboard each organization separately.

   1. Identify the MongoDB Atlas account that you will use to create the service account.

      Required Permissions: A service account is scoped to one organization. To create a service account, you must be assigned to the Organization Owner role for the organization that you want SSPM to scan.
   2. Open a web browser to the MongoDB Atlas website, and log in to the Organization Owner account.
   3. If you're a member of multiple organizations, make sure you're in the organization that you want SSPM to scan.

      A selection list in the top-left corner of the MongoDB Atlas page shows your current organization. If necessary, you can select a different organization from this list.
   4. Navigate to the Organization Access Manager page, To do this, from the left navigation pane, select Access Manager.
   5. On the Organization Access Manager page, select Add New Service Account.
   6. On the Create Service account page, specify the following information:

      • A Name for the service account. For example, SSPM Service Account.
      • A Description of the service account. For example, Service account for SSPM authentication.
      • A Client Secret Expiration date. The recommended expiration period is 90 days.
      • The Organization Permissions that you will grant to the service account. Select Organization Owner permissions. SSPM requires this level of access to complete its scans.

   7. Create the service account.

      MongoDB Atlas creates the service account and displays the programmatic credentials (Client ID and Client Secret) that SSPM will use for authentication.
   8. Copy the Client ID and Client Secret and paste them into a text file.

      Don’t continue to the next step unless you have copied the Client ID and Client Secret. You will provide this information to SSPM during the onboarding process.
2. Connect SSPM to your MongoDB Atlas instance.

   In SSPM, complete the following steps to enable SSPM to connect to your MongoDB Atlas instance.

   1. Log in to Strata Cloud Manager.
   2. Select ConfigurationSaaS SecurityPosture SecurityApplicationsAdd Application and click the MongoDB Atlas tile.
   3. On the Posture Security tab, Add New instance.
   4. Log in with Credentials.
   5. Enter the Client ID and Client Secret and Connect.