--- title: Atlan API Integration on Truto slug: atlan category: Knowledge Management canonical: "https://truto.one/integrations/detail/atlan/" --- # Atlan API Integration on Truto **Category:** Knowledge Management **Status:** Beta ## MCP-ready AI tools Truto exposes 17 tools for Atlan that AI agents can call directly. - **create_a_atlan_group** — Create a new group in Atlan by wrapping group details in a group object with attributes (alias and isDefault as arrays of strings) and an internal name. Returns: group. Required: group.attributes.alias, group.name. The internal name must be unique, all lowercase, and include only alphanumeric characters and the underscore (_). - **list_all_atlan_groups** — List all groups in Atlan. Returns group records including id, path, name, attributes (alias, isDefault, description), roles, and createdAt. Supports sorting by a property such as createdAt and column projection to restrict the fields returned. - **atlan_groups_get_by_name** — Retrieve groups in Atlan by name using a contains (ilike) search on the alias field. Returns a list of matching group records including id, path, name, attributes (alias, isDefault, description), roles, and createdAt. Required: filter. - **atlan_groups_get_members** — List users that are members of an Atlan group by providing the group's GUID. Returns each member user's id, username, and email. Required: group_id. - **update_a_atlan_group_by_id** — Update an Atlan group's attributes such as description and default group status. Returns: id, path, attributes. Required: id, path. The path must be the internal group name prefixed with /, and all attribute values are arrays of strings. - **atlan_groups_remove_users** — Remove one or more users from an Atlan group by specifying their user GUIDs. Returns an empty 204 response on success. Required: group_id, users. - **create_a_atlan_user** — Invite a user to Atlan by wrapping user details in a users array. Returns an empty 204 response on success. Required: users (each with email, role, and roleId). Role must be one of $admin, $member, or $guest. Look up role GUIDs via GET /api/service/roles. - **list_all_atlan_users** — List all users in Atlan with support for filtering by username or email. Returns: id, username, email. Default sort is by username. - **atlan_users_get_groups** — Retrieve the groups a user is a member of in Atlan. Returns: id, name, path, attributes. Required: user_id. - **atlan_users_add_to_groups** — Add a user to one or more groups in Atlan. Returns an empty 204 response on success. Required: user_id, groups. - **atlan_users_change_role** — Change the workspace role of a user in Atlan. Returns an empty 204 response on success. Required: user_id, roleId. Look up role GUIDs via GET /api/service/roles. - **list_all_atlan_roles** — List all workspace roles in Atlan. Returns: id, name. The id is the role GUID needed for user creation and role changes. No caller-supplied parameters beyond pagination. - **create_a_atlan_sso_group_mapping** — Create a new SSO group mapping in Atlan that links an identity-provider group to an Atlan group. Returns: identityProviderAlias, identityProviderMapper, id, name, config. Required: sso_alias. - **get_single_atlan_sso_group_mapping_by_id** — Get a single SSO group mapping in Atlan by its map identifier. Returns: identityProviderAlias, identityProviderMapper, id, name, config. Required: sso_alias, id. - **list_all_atlan_sso_group_mappings** — List all SSO group mappings for a given identity provider in Atlan. Returns: identityProviderAlias, identityProviderMapper, id, name, config. Required: sso_alias. - **update_a_atlan_sso_group_mapping_by_id** — Update an existing SSO group mapping in Atlan, typically to change the mapped SSO group name. Returns: identityProviderAlias, identityProviderMapper, id, name, config. Required: sso_alias, id. - **delete_a_atlan_sso_group_mapping_by_id** — Delete an SSO group mapping in Atlan by its map identifier. Returns an empty 204 response on success. Required: sso_alias, id. ## How it works 1. **Link your customer's Atlan account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Atlan.** The Proxy API is a 1-to-1 mapping of the Atlan API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Automate Atlan user lifecycle from your IAM or HRIS product** — Identity and workforce platforms can provision, update, and deprovision Atlan users the moment a hire, role change, or offboarding event occurs in the source system. This eliminates manual catalog admin work and keeps data access aligned with employment status. - **Sync IdP groups into Atlan for governed data access** — Security and SSO platforms can push group mappings from Okta, Entra, or other IdPs directly into Atlan so federated groups always reflect the source of truth. Customers get zero-touch RBAC across their data catalog without maintaining a second directory. - **Mirror team structures into Atlan workspace groups** — Collaboration, project management, and team topology tools can replicate their internal team hierarchies as Atlan groups and memberships. This lets end users discover and govern data along the same organizational lines they already work in. - **Enforce access certifications from your GRC or audit platform** — Compliance tools can codify access reviews by programmatically changing Atlan user roles and group memberships when a certification is approved or revoked. Auditors get a clean, automated trail of who can access the catalog and why. - **Bootstrap Atlan workspaces for new customer tenants** — Platforms that stand up data environments for their customers can auto-create the corresponding Atlan users, roles, and groups as part of tenant provisioning. New workspaces come online fully governed on day one. ## What you can build - **Just-in-time Atlan user provisioning** — Create Atlan users on demand with the correct workspace role ($admin, $member, or $guest) whenever a user is granted access in your product. - **Bidirectional group membership sync** — Keep group rosters in lockstep by adding users to Atlan groups and removing them when your source system changes, using list, add, and remove operations. - **SSO group mapping manager** — Ship a UI where admins can create, list, update, and delete Atlan SSO group mappings so IdP groups translate cleanly into Atlan federated groups. - **Role-based access automation** — Trigger role changes in Atlan automatically when a user is promoted, certified, or moved between departments in your platform. - **Group and membership explorer** — Embed a live view of Atlan groups, their members, and each user's group affiliations so your customers can audit catalog access without leaving your product. - **Bulk workspace bootstrap** — Provision an initial set of Atlan users, groups, and SSO mappings as part of your onboarding flow so new customers land in a governed state. ## FAQs ### What Atlan capabilities are available through Truto today? The current Atlan integration focuses on Identity & Access Management: managing users (create, list, change role), groups (create, list, get by name, update, list members, remove users), user-to-group associations, roles, and SSO group mappings (create, read, update, delete). ### How does authentication with Atlan work? Truto handles the credential exchange and token lifecycle for Atlan on your behalf, so your end users connect their Atlan workspace once and your product calls the tools without you managing secrets, refreshes, or workspace-specific auth quirks. ### Can we assign workspace roles like admin, member, or guest when creating users? Yes. The create_a_atlan_user and atlan_users_change_role tools support assigning and updating Atlan's standard workspace roles ($admin, $member, $guest), which you can retrieve via list_all_atlan_roles. ### Does the integration support SSO / IdP federation workflows? Yes. You can fully manage Atlan SSO group mappings through create, get, list, update, and delete tools, which is what most customers use to federate Okta, Entra, or other IdP groups into Atlan. ### Are metadata, lineage, or asset-level operations supported? Not in the current toolset. Today's integration is scoped to IAM and SSO governance. Asset, lineage, and metadata enrichment endpoints can be added on request — reach out to Truto and we'll expand coverage based on your use case. ### How do we handle removing users from groups or offboarding? Use atlan_groups_remove_users to detach users from specific groups as part of role changes or offboarding flows, typically triggered by events from your HRIS, IAM, or internal deprovisioning pipeline. ## Related reading - [Connect Atlan to ChatGPT: Manage User Roles and Group Governance](https://truto.one/blog/connect-atlan-to-chatgpt-manage-user-roles-and-group-governance/) — Learn how to connect Atlan to ChatGPT using a managed MCP server. Automate user provisioning, manage group governance, and map SSO configurations directly via natural language. - [Connect Atlan to Claude: Provision Users and Manage SSO Mappings](https://truto.one/blog/connect-atlan-to-claude-provision-users-and-manage-sso-mappings/) — Learn how to connect Atlan to Claude using a managed MCP server. Automate user provisioning, RBAC updates, and SSO group mappings with AI agents. - [Connect Atlan to AI Agents: Automate Access and Group Membership](https://truto.one/blog/connect-atlan-to-ai-agents-automate-access-and-group-membership/) — Learn how to connect Atlan to AI agents using Truto's /tools endpoint. Build autonomous workflows for user provisioning, group membership, and SSO mapping.