Adding your ManageEngine credentials to Oomnitza

Best practice
For the integration with Oomnitza, create a dedicated user account.

ManageEngine uses OAuth authentication and requires your Client ID, Secret, and Customer Domain to be added to Oomnitza.

Client ID and Secret

To obtain a Client ID and Secret, complete the following steps:

1. Login or create a ManageEngine trial account.
2. Open the Zoho API console, which is used by ManageEngine to generate OAuth credentials.
3. Click Add Client in the upper right.
4. Click Server-based applications.
5. Enter a Client Name.
6. Enter your Oomnitza URL in the Homepage URL field. For example, https://<my-account_name>.oomnitza.com.
7. Enter the following Authorized Redirect URI: https://generic-oauth2-proxy.oomnitza.com/oauth2/redirect_url
8. Click Create.
9.  Copy the Client ID and Secret and store them securely for the next step.
10. Click the Settings tab. You have the option to enable the use of the client on some or all domains.

For information about OAuth 2.0 and Zoho, go here: ManageEngine Mobile Device Manager.

Customer Domain

Location of Data Center	Accounts Server URL
USA	accounts.zoho.com
Europe	accounts.zoho.eu
India	accounts.zoho.in
China	accounts.zoho.com.cn
Australia	acounts.zoho.com.au

Scopes

The following scopes are required to run the integration and are automatically populated in Oomnitza:

 MDMOnDemand.MDMInventory.CREATE, MDMOnDemand.MDMInventory.READ, SDPOnDemand.assets.ALL, DesktopCentralCloud.Common.READ, DesktopCentralCloud.SOM.READ, DesktopCentralCloud.SOM.UPDATE, DesktopCentralCloud.Inventory.READ, DesktopCentralCloud.Inventory.UPDATE, DesktopCentralCloud.PatchMgmt.READ, DesktopCentralCloud.PatchMgmt.UPDATE

The permissions these scopes provide are also highlighted when you create the credentials.

Add credentials to the vault in Oomnitza

To authorize connections between Oomnitza and ManageEngine, complete these steps:

Make life easier and add your credentials to Oomnitza before you create the integration.  

1. In Oomnitza, click Configuration > Security > Credentials.
2. Click Add new credential (+).
3. Search for the integration, and then click the forward arrow > to select the integration.
4. Enter your client credentials and any other additional information.
5. Click Authenticate. You are prompted to log in to authorize your request.
6. Click CREATE.

1. Add the information details.
2. Click the AUTHORIZATION tab.
3. Ensure that OAuth 2.0 is selected as the Authorization type.
4. Ensure that ManageEngine is selected from the SaaS list.
5. Enter your Client ID and Client Secret
6. You do not need to add any additional scopes as these have already been provided for you. 
7. Enter your Customer Domain. Do not include a leading https:// when supplying the Customer Domain.
8. Click Authenticate.
9. You will be prompted to sign in to your ManageEngine account.
10. Click Accept to allow your app to access data in your Zoho account.
11. Click Create. 

Figure: In this example, the customer is located in the USA so they enter the URL of the account's server in the USA.

You use the credentials that you added to create and customize your ManageEngine integrations with Oomnitza.

Troubleshooting authentication errors

If you encounter authentication errors when running the ManageEngine integration in Oomnitza, it may be due to Zoho Multi-Factor Authentication (MFA). If the Zoho API Console is using MFA, you need to log out first before you can validate your ManageEngine credentials in Oomnitza.

To fix the MFA authentication errors, follow these steps:

1. Sign out of your user account in the Zoho API Console. Take note of your Client ID and Client Secret.
2. Create a new credential in Oomnitza and add your Client ID, Secret, and Customer Domain, following the instructions provided previously.
3. Save your credentials under a new name, such as ManageEngine Computers Asset Load Updated, so it doesn't conflict with the previous credentials you have added. 
4. Verify that you're signed out of the Zoho API Console, then click Authenticate. You'll be prompted to log back into the Zoho API Console.
5. After logging back in, you should see an MFA pop-up. If available, choose to postpone the next MFA popup for 180 days. This action "trusts" the credential for the said duration.
6. If done accurately, your credential will be marked Authenticated in Oomnitza.
7. Open the failed ManageEngine Cloud integration in Configuration > Integrations and select the credential you just created in the Credential Details section.
8. Pause your integration and click Test Run to run the integration again. 
9. Click Sync Sessions to confirm that the credentials you have added bypassed MFA successfully.