Skip to main content
All CollectionsConnectionsProvider
Jit Connection
Jit Connection
Updated this week

Automatically send evidence for key technical SOC 2 controls to the Drata platform. Learn more in SOC2 by Drata.

Integration steps

Note: This is a partner connection that is externally managed. You can use connections from external partners to enable workflows, but they can't access Drata's automated tests since they aren't directly supported by Drata. Learn more about partner connections

Step 1: Create an API token in Drata

  1. Go to Drata's Settings page > API Keys page.

  2. Select Create API Key.

  3. Complete the Create API Key form:

    • Expiration date: Choose a long expiration period to avoid interruptions.

    • Enable the following scopes:

      • Personnel: Personnel details – Read

      • Controls: Control list – Read

      • Workspaces: List workspaces – Read

      • Evidence Library:

        • List Evidence – Read

        • Add Evidence – Write

        • Update Evidence – Write

        • Delete Evidence – Write

  4. Copy the Drata API key and save it in a secure location.

Step 2: Create the required token in Jit

Create a token in Jit:

  1. Go to Settings > Users & Permissions.

  2. Select API Token > Generate Token.

  3. Create a new token:

    • Add a meaningful description.

    • Assign the developer role.

  4. When you generate the token, Jit provides both a Client ID and a Secret Key.

  5. Copy both values and store them securely.

Store required items in Jit:

  1. In Jit, go to Settings > Secrets.

  2. Select Create new secret to add the following secrets:

    • DRATA_API_KEY: Paste your Drata API key.

    • JIT_CLIENT_ID: Paste your Jit Client ID.

    • JIT_CLIENT_SECRET: Paste your Jit Secret Key.

Note: Use these exact secret names (DRATA_API_KEY, JIT_CLIENT_ID, and JIT_CLIENT_SECRET) to ensure the integration functions correctly.

Step 3: Configure the integration in Jit

  1. In Jit, go to Integrations and locate the Drata tile.

  2. Select Integrate as-code to open the jit-integration.yml file in your central Jit repository.

  3. For the Drata integration structure, replace the placeholder values with your specific information:

    • 'Enter the desired Drata Workspace':

      • If workspaces are enabled:

        • Go to Drata, then select Settings > Company Info.

        • Scroll down to Workspaces section and copy the name of the workspace you want to send evidence to.

      • If workspaces are not enabled:

        • Go to Drata, then select Settings > Company Info.

        • Copy the Project Name.

    • 'Enter the email address of the Drata user who created the API key':

      • Enter the email address of the Drata user who created the API key.

  4. Add the following Drata integration structure to the end of the file.

Drata integration structure

drata:
  workspace: 'Enter the desired Drata Workspace'
  user_email: 'Enter the email address of the Drata user who created the API key'

Jit report will be periodically sent to the Drata workspace you selected, according to your SOC2 by Drata plan.

Partner Offers & Discounts

Drata has direct partnerships and discounted pricing for first time customers of Jit. Get 25% off your first year of Jit by visiting https://www.jit.io/book-a-demo.

*Offer only eligible for new customers

Check out more partner offers and discounts.

Did this answer your question?