LaunchDarkly

Connect a LaunchDarkly account to Ploy to see who has access to it, which base role and custom roles each person holds, and which teams they belong to. Ploy can also invite people, change their base role, remove them and add them to teams.

This integration is in beta

The LaunchDarkly integration is in beta. It was built from LaunchDarkly's API documentation and has not yet been run against a live customer account, so some behaviour may change as we confirm it.

The first step of setup is a consent checkbox. Ticking it lets Ploy record redacted error details when a call to LaunchDarkly fails, so we can fix problems quickly. Redacted means names, email addresses, tokens and other personal or secret values are removed before anything is stored. You must tick it to continue.

What Ploy reads

• Members: everyone in the account, with their email address, base role (Reader, Writer, Admin, Owner or No access), custom roles, whether two-factor authentication is on, and when they were last seen. People who have been invited but have not accepted yet are shown as pending.

• Teams: every team, and which members belong to it.

LaunchDarkly has no disabled state for a member. When someone is removed from LaunchDarkly, Ploy shows their access as removed after the next scan.

Ploy connects one LaunchDarkly account per connection.

What Ploy can change

• Invite a member by email, with the Reader role unless you choose another.

• Change a member's base role between Reader, Writer, Admin and No access. Custom roles are left as they are.

• Remove a member from the account. Their access tokens are not deleted by LaunchDarkly, so review them in LaunchDarkly after removing someone.

• Add a member to a team from the team's resource page. Removing someone from a team is not available yet.

If SCIM provisioning is turned on for your account, LaunchDarkly does not accept invitations or removals through its API, and your identity provider can overwrite role changes. Manage those people in your identity provider instead.

Before you start

You need to be an Admin or the Owner of the LaunchDarkly account, and you need to know which LaunchDarkly region your account is hosted in: Commercial (app.launchdarkly.com, most accounts), EU (app.eu.launchdarkly.com) or Federal (app.launchdarkly.us).

Create an access token

1. In LaunchDarkly, open Organization settings (called Account settings on some accounts), then Authorization.

2. Create a new access token and give it a name such as Ploy.

3. Choose Service token, so the token keeps working if the person who created it leaves.

4. Give it the Admin role. A Reader token is enough to scan members and teams, but Ploy needs Admin to invite, change roles, remove people and add them to teams.

5. Save the token and copy it. You will not be able to see it again.

Connect LaunchDarkly in Ploy

1. In Ploy, go to Integrations and choose LaunchDarkly.

2. Tick the beta consent checkbox.

3. Choose your LaunchDarkly region.

4. Paste the access token.

5. Click Test connection, then save.

Ploy runs its first scan straight away. Members refresh every hour; teams every six hours.

Troubleshooting

• LaunchDarkly rejected that access token: the token was not copied in full, has expired, or was created in a different region from the one you chose.

• That access token cannot read the account's members: give the token the Reader role or higher.

• LaunchDarkly refused the change: the token needs the Admin role, or SCIM provisioning is turned on and the change must be made in your identity provider.