Jenkins Integration

Jenkins is a widely used CI/CD automation server that helps teams build, test, and deploy software efficiently.

By integrating Jenkins with Sprinto, you can automatically monitor user access and ensure that only authorised users have access to your CI/CD environment.

This integration helps organisations:

• Track Jenkins user accounts
• Monitor access to Jenkins environments
• Validate role assignments
• Ensure offboarded users do not retain access

Sprinto uses this integration to automate Access Review controls and checks.

Prerequisites

Before connecting Jenkins to Sprinto, ensure the following:

• You have administrator access to your Jenkins instance.
• Your Jenkins instance is accessible via a public URL or reachable endpoint.
• You can generate a Jenkins API token.

Here is the same section rewritten without images, aligned with the Microsoft Writing Style Guide and Sprinto documentation style.

IP Allowlist (If Required)

If your Jenkins instance is restricted, allowlist the appropriate Sprinto IP:

Install the PeopleView plugin in Jenkins

Sprinto requires the PeopleView plugin to sync users from Jenkins. If this plugin is not installed, user synchronisation will fail, and the integration will not work correctly.

Follow these steps to install the plugin.

Step 1: Open Jenkins settings

1. Log in to your Jenkins dashboard.
2. Click the Settings icon in the top-right corner of the page.

Step 2: Open the Plugins page

1. On the Manage Jenkins page, locate Plugins under the System Configuration section.
2. Click Plugins to open the Jenkins plugin manager.

Step 3: Search for the PeopleView plugin

1. In the Plugins page, select Available plugins from the left sidebar.
2. In the search bar, enter People View.

Step 4: Install the plugin

1. Locate People View in the search results.
2. Select the checkbox next to the plugin.
3. Click Install.

Jenkins begins downloading and installing the plugin.

Step 5: Verify installation

1. After installation starts, Jenkins displays the Download progress page.
2. Wait until the installation status shows Success.
3. After the installation completes, the plugin is ready to use.

You can now proceed with the Jenkins integration setup in Sprinto.

Permissions Required

Sprinto requires read-only access to retrieve user and role information.

Data Collected by Sprinto

Sprinto retrieves the following information from Jenkins:

• Roles
• Username
• Status
• Primary Email
• 2FA Enabled

This data is used only to monitor access compliance.

Connect Jenkins to Sprinto

Step 1: Navigate to Integrations

1. Log in to the Sprinto dashboard.
2. Go to Settings → Integrations.
3. Under the All tab, search for Jenkins.
4. Click Connect next to Jenkins.

A connection drawer opens showing:

• Number of controls automated
• Number of checks automated
• Required permissions
• Data used by Sprinto

Review the details and click Next.

Generate Jenkins API Token

Sprinto connects to Jenkins using an API token.

Follow these steps to generate the token.

1. Log in to your Jenkins dashboard.
2. Click your profile icon.
3. Navigate to Profile → Configure.
4. Locate the API Token section.
5. Click Add API Token.
6. Enter a name for the token
   Example: Sprinto Access
7. Click Generate.
8. Copy the generated token and store it securely.

Return to Sprinto after generating the token.

Connect Jenkins Account

After generating the API token:

1. Select the checkbox confirming that you have the credentials.
2. Click Connect Jenkins.

A configuration screen appears where you must enter:

• Username
• API Token
• Jenkins URL

Field Details

Complete the Integration

1. Enter the required details.
2. Click Connect Jenkins.

Once validated:

• The integration becomes active.
• Jenkins will be available as a critical system for access monitoring.

Post Connection Flow

Once the Jenkins integration is successfully connected, Sprinto automatically begins syncing user access data.

The integration feeds Jenkins access information into Sprinto’s Platform Control Framework (PCF), which powers automated access monitoring and compliance checks.

Sprinto uses this data to:

• Detect users with access to Jenkins
• Validate role assignments
• Identify unauthorised or excessive access
• Flag offboarded users who still retain access

This data is automatically mapped to relevant Access Review controls and checks, eliminating the need to manually configure Jenkins as a critical system.

What Sprinto Monitors

Sprinto automatically validates:

Sync Behaviour

• Initial sync may take up to 24 hours.
• Integration status will show Active once connected.
• Access review checks begin running automatically.

Troubleshooting

Invalid API Token

Ensure the token:

• Was generated correctly
• Has not expired or been revoked

Connection Failed

Verify that:

• Jenkins URL is correct
• Jenkins instance is reachable
• Username and API token are valid

No Users Detected

Confirm that:

• The account used has admin access
• User information is accessible through the Jenkins API

Support

If you encounter any issues or need assistance with your integration, contact the Sprinto support team at support@sprinto.com.