> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-docs-baton-kubernetes.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up a Northflank connector

> C1 provides identity governance for Northflank. Integrate your Northflank organization with C1 for unified visibility and governance over user access.

C1 provides identity governance for Northflank. Integrate your Northflank
organization with C1 for unified visibility and governance over who has access
through organization roles and directory groups.

## Capabilities

| Resource | Sync                                                          | Provision |
| -------- | ------------------------------------------------------------- | --------- |
| Users    | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Roles    | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Groups   | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |

The connector syncs your Northflank organization members as users, your
organization roles and directory groups as access-granting resources, and the
membership of each role and group as grants.

## Gather Northflank credentials

<Warning>
  The Northflank connector authenticates with an API token minted from an RBAC
  role. The role must grant **read** access to organization members, roles, and
  directory groups. A token whose role is missing any of these scopes fails to
  connect rather than syncing partial data.
</Warning>

A Northflank API token inherits the permissions of the RBAC role it is generated
from, and the token is scoped to a single organization.

<Steps>
  <Step>
    In Northflank, create or choose an RBAC role that grants read access to
    **Organization > Members**, **Organization > Roles**, and directory groups.
  </Step>

  <Step>
    Generate an API token from that role under **Settings > API > Tokens**.
  </Step>

  <Step>
    Copy the token value. You will paste it into the connector configuration.
  </Step>
</Steps>

## Configure the Northflank connector

<Tabs>
  <Tab title="Cloud-hosted">
    Follow these instructions to use a built-in, no-code connector hosted by C1.

    <Steps>
      <Step>
        In C1, navigate to **Integrations** > **Connectors** and click **Add connector**.
      </Step>

      <Step>
        Search for **Northflank** and click **Add**.
      </Step>

      <Step>
        Choose how to set up the new Northflank connector.
      </Step>

      <Step>
        Set the owner for this connector.
      </Step>

      <Step>
        Click **Next**.
      </Step>

      <Step>
        Find the **Settings** area of the page and click **Edit**.
      </Step>

      <Step>
        Enter the Northflank credentials:

        * **Northflank API token**: The API token you generated from your RBAC role.
        * **Northflank API base URL**: Leave blank to use the default (`https://api.northflank.com`).
      </Step>

      <Step>
        Click **Save**.
      </Step>

      <Step>
        The connector's label changes to **Syncing**, followed by **Connected**. You can view the logs to ensure that information is syncing.
      </Step>
    </Steps>

    **Done.** Your Northflank connector is now pulling access data into C1.
  </Tab>

  <Tab title="Self-hosted">
    Follow these instructions to run the Northflank connector in your own
    environment.

    <Steps>
      <Step>
        Create a secret for the Northflank API token.
      </Step>

      <Step>
        Configure the connector environment variables:

        * **BATON\_NORTHFLANK\_API\_TOKEN**: The API token you generated from your RBAC role.
        * **BATON\_NORTHFLANK\_BASE\_URL**: Optional. Override the API base URL; defaults to `https://api.northflank.com`.
      </Step>

      <Step>
        Deploy the connector using your standard self-hosted connector process.
      </Step>
    </Steps>

    **Done.** Your Northflank connector is now pulling access data into C1.
  </Tab>
</Tabs>