Skip to main content
An email-protection entitlement is not proof of policy effectiveness. Purchased seats are not the same as seats assigned inside a client directory.
Pax8 requires a supported delegated OAuth path for third-party platforms. Its current Alignr form is not an approved partner-credential onboarding guide. Read the Pax8 entry before attempting setup.

​
Connect one source, then verify one client

  1. Open Integrations and add the intended product. Give the connection a name that identifies its account, controller or region.
  2. Enter the fields for that product below. Obtain credentials through the vendor administrator responsible for the intended account; a field list does not grant API entitlement or permissions.
  3. Review the saved connection outcome, then use Clients & sites to discover and explicitly assign the correct source records. Compare identifiers as well as names.
  4. For evidence sources, use Sync now, inspect Sync history, and check one client’s source and observation time. Directory sources instead use Import clients and Refresh client records.
  5. Compare the available observations with the control’s requirements before running checks.
Checkpoint: one known source record maps to the intended client and the expected observations are present. A successful credential save alone is not a completed assessment. The tables show the current Alignr form. “Required” means the form requires a value; optional fields can still be necessary for your account or connection mode. Keep secrets in the credential fields.

​
Choose your product

Use an API 2.0 application in the intended account. Protection/features describe the email-security service; they do not prove SPF, DKIM or DMARC are correctly configured.Map: One Mimecast accountCode per connection.Available observations: Mail protection provider, Mail protection feature.
Use an Essentials administrator credential, the partner primary domain and correct regional shard. Domains are mapping identifiers here; review links after a primary-domain change. This is not the enterprise Proofpoint product API.Map: Each organization primary domain. A primary-domain change requires reviewing the mapping.Available observations: Mail protection provider, Mail protection feature.
The current Alignr form exposes Client ID and Client secret, but Pax8 requires third-party platforms to use delegated OAuth and says partner API credentials must not be shared with them. Do not enter a partner credential to work around this requirement. Confirm an approved delegated integration is available with Alignr support before connecting. The current connector’s licence, purchased-seat and renewal observations describe its implementation; they do not establish that production onboarding is ready.Map: Each Pax8 company UUID.Available observations: Licence or entitlement, Purchased seats, Next licence renewal.Use the vendor’s current instructions for credential preparation: Pax8 authentication.
Use the Partner Center application credentials for customer subscriptions. This connector does not grant delegated Microsoft Graph access or report each user’s assigned licence. Use Microsoft client connections for identity assessments.Map: Each customer Microsoft tenant GUID.Available observations: Licence or entitlement, Purchased seats, Next licence renewal.
Use the SimpleAPI credentials, subscription key, actual API URL and marketplace code from your account. This connector reports licence presence and renewal; it does not supply purchased or assigned seat counts.Map: Each Ingram customer platform ID.Available observations: Licence or entitlement, Next licence renewal.
Use a Connect API token for the customer accounts to inspect. This connector reports purchased reservation quantities, not assigned-user seats or a guessed renewal date.Map: Each customer tier-account ID (TA-…), excluding reseller tier accounts.Available observations: Licence or entitlement, Purchased seats.

​
If the expected evidence is missing

Check the account or region, the discovered source ID and the completed collection outcome. Then compare the list above with the predicate reference. A supported product can still lack the particular observation your control needs. Do not turn an absent observation into a passing value. Maintain or reconnect a source, or trace a coverage gap.