> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-hold-policy-references-ga.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up a SendSafely connector

> C1 provides identity governance for SendSafely. Integrate your SendSafely instance with C1 for unified visibility and governance over user access.

C1 provides identity governance for SendSafely. Integrate your SendSafely
instance with C1 for unified visibility and governance over user access.

## Capabilities

| Resource        | Sync                                                          | Provision |
| --------------- | ------------------------------------------------------------- | --------- |
| Users           | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Contact groups  | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Security groups | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |

The connector syncs your SendSafely users along with their contact group and
security group memberships. Each contact group and security group exposes a
**Member** entitlement, and C1 records a grant for every member of the group.

This connector is read-only. It does not provision or modify access in
SendSafely.

## Gather SendSafely credentials

<Warning>
  You need a SendSafely user with administrator access to your organization so the
  API key can read enterprise contact groups and security groups.
</Warning>

<Steps>
  <Step>
    Sign in to SendSafely and open **Edit Profile** from the account menu.
  </Step>

  <Step>
    In the **API Keys** section, generate a new API key. SendSafely shows an
    **API Key** and a paired **API Secret**.
  </Step>

  <Step>
    Copy the API Key and API Secret. The secret is shown only once, so store it
    securely. Also note your SendSafely host URL (the address you use to sign
    in, for example `https://yourcompany.sendsafely.com`).
  </Step>
</Steps>

## Configure the SendSafely connector

<Tabs>
  <Tab title="Cloud-hosted">
    Follow these instructions to use a built-in, no-code connector hosted by C1.

    <Steps>
      <Step>
        In C1, navigate to **Integrations** > **Connectors** and click **Add connector**.
      </Step>

      <Step>
        Search for **SendSafely** and click **Add**.
      </Step>

      <Step>
        Choose how to set up the new SendSafely connector.
      </Step>

      <Step>
        Set the owner for this connector.
      </Step>

      <Step>
        Click **Next**.
      </Step>

      <Step>
        Find the **Settings** area of the page and click **Edit**.
      </Step>

      <Step>
        Enter the SendSafely credentials:

        * **Host URL**: Your SendSafely host URL, for example `https://yourcompany.sendsafely.com`.
        * **API key**: The API Key from your SendSafely profile.
        * **API secret**: The API Secret paired with the API Key.
      </Step>

      <Step>
        Click **Save**.
      </Step>

      <Step>
        The connector's label changes to **Syncing**, followed by **Connected**. You can view the logs to ensure that information is syncing.
      </Step>
    </Steps>

    **Done.** Your SendSafely connector is now pulling access data into C1.
  </Tab>

  <Tab title="Self-hosted">
    Follow these instructions to run the SendSafely connector in your own
    environment.

    <Steps>
      <Step>
        Create secrets for the SendSafely credentials.
      </Step>

      <Step>
        Configure the connector environment variables:

        ```bash theme={"theme":{"light":"css-variables","dark":"css-variables"}}
        BATON_BASE_URL=https://yourcompany.sendsafely.com
        BATON_API_KEY=<SendSafely API key>
        BATON_API_SECRET=<SendSafely API secret>
        ```
      </Step>

      <Step>
        Deploy the connector using your standard self-hosted connector process.
      </Step>
    </Steps>

    **Done.** Your SendSafely connector is now pulling access data into C1.
  </Tab>
</Tabs>

## Connector configuration reference

| Setting    | Environment variable | Required | Description                                                                                       |
| ---------- | -------------------- | -------- | ------------------------------------------------------------------------------------------------- |
| Host URL   | `BATON_BASE_URL`     | Yes      | Your SendSafely host URL, including the scheme, for example `https://yourcompany.sendsafely.com`. |
| API key    | `BATON_API_KEY`      | Yes      | API key from the Edit Profile API Keys section.                                                   |
| API secret | `BATON_API_SECRET`   | Yes      | API secret paired with the API key. Used to sign requests; stored as a secret.                    |