NEWFreshservice is now a Ploy integrationSee what shipped
2.0INTEGRATIONS

Connected to where access really lives

Sixty-two connectors that read entitlements, write grants, and revoke them again. No agents, no scripts, no CSV round trips. If a tool holds access, Ploy governs it.

62 LIVE CONNECTORSUP TO 28 CAPABILITIES<10 MIN SETUP
2.1MOST CONNECTED
OktaIDENTITY PROVIDER28/28Groups, app assignments and MFA factors read on every sync. Joiners and leavers land the same day the directory changes.VIEW INTEGRATION Amazon Web ServicesCLOUD INFRASTRUCTURE28/28Identity Center permission sets, IAM roles and the resources they reach, mapped per account with group membership granted from Ploy.VIEW INTEGRATION GitHubSOURCE CONTROL28/28Org roles, team membership and repo permissions, including the outside collaborators nobody remembers inviting.VIEW INTEGRATION
2.2THE DIRECTORY

Every connector, and what it can do

62 SHOWN
AdobeSAASADPSAASAircallSAASAirtableSAASAmazon Web ServicesINFRASTRUCTUREAnthropicSAASAtlassianSAASAuth0SAASBambooHR & PEOPLEBrowserStackSAASCalendlySAASCZCezanneHR & PEOPLECloudflareSAASConfluentSAASDialpadSAASDCDigiCertSAASDocuSignSAASFactorialHR & PEOPLEFreshserviceSAASGitHubSOURCE CONTROLGitLabSAASGongSAASGoogle Cloud PlatformINFRASTRUCTUREGoogle WorkspaceIDENTITYGrafana OnCallINFRASTRUCTUREHiBobHR & PEOPLEHighQHR & PEOPLEHubSpotSAASHumaansHR & PEOPLEIncident.ioINFRASTRUCTUREIntercomSAASJetBrainsSAASJiraSAASJumpCloudIDENTITYKandjiSAASLastPassSAASLinearSAASLuccaHR & PEOPLEMetabaseSAASMicrosoftIDENTITYMicrosoft ExchangeSAASMiroSAASmonday.comSAASNew RelicSAASNotionSAASOktaIDENTITYOLOneLoginSAASOneTrustSAASOpenAISAASPax8HR & PEOPLEPersonioHR & PEOPLESalesforceSAASSaltoSECURITYSIITSAASSlackSAASTailscaleINFRASTRUCTURETessianSECURITYTestRailSAASTravelPerkSAASWorkdayHR & PEOPLEZendeskSAASZoomSAASCustom integrationANY API · BUILT WITH YOU
Nothing matches that yet.REQUEST IT →
2.3CUSTOM CONNECTORS

If it holds access, it can be connected

The directory is where Ploy starts, not where it stops. Custom connectors run on the same engine, so a legacy system, an application that never leaves your network, a private cloud or a tool nobody else covers is governed exactly like the connectors above. Being locked down is not a reason to be left out of it.

TN3270 · ACCESS TABLE
USR-4412 GL-POST RWUSR-0917 PAYROLL R SVC-0032 MM-BATCH RWUSR-2201 AP-INQ R
PLOY READS AND WRITES

Legacy systems

Mainframes, ERPs and in-house tools written long before single sign-on. If a system can say who has access, Ploy can read it and write to it.

YOUR NETWORK
APP
CONNECTOR
NOTHING OPENED UP

On-premise applications

Applications that never leave your network. The connector is built to reach the system where it already runs, so nothing has to be opened up to be governed.

PUBLIC
PRIVATE
ONE GRAPH

Cloud estates

Any cloud you run, public or private. Accounts, roles and bindings are read the same way as the providers already in the directory.

GET/scim/users200POST/grants201DELETE/grants/8412204
READ · WRITE · REVOKE

Any SaaS with an API

A tool the directory does not list yet is a connector we build with you. Send us the API and it joins the same read, write and revoke cycle.

Missing the one you need?

Tell us which tool you need and where to send progress. We will keep you posted while the connector is built.

Goes straight to the team. We reply to the address above.

See what Ploy finds in your stack.