> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/help/troubleshooting/integration-issues.md).

# Integration issues

To leverage DoControl in your organization, you need to integrate each SaaS application that your organization uses with DoControl.

Scroll down to troubleshoot your relevant login issue:

* [What are integrator prerequisites for integrating SaaS apps with DoControl?](#what-are-integrator-prerequisites-for-integrating-saas-apps-with-docontrol)
* [DoControl page does not load](#docontrol-page-does-not-load)
* [Google Workspace integration errors](/docontrol-user-guide/help/troubleshooting/integration-issues/google-integration-errors.md)
* [Slack integration errors](/docontrol-user-guide/help/troubleshooting/integration-issues/slack-integration-errors.md)
* [Microsoft 365 integration error](#microsoft-365-integration-error)
* [Cannot integrate with SaaS app](#cannot-integrate-with-saas-app)
* [Token expired](#token-expired)

{% hint style="info" %}
For the list of integrated apps, and the minimum plan required to integrate each app with DoControl, see [supported SaaS apps](/docontrol-user-guide/getting-started/overview/supported-saas-applications.md).
{% endhint %}

## What are integrator prerequisites for integrating SaaS apps with DoControl?

To integrate your organization's SaaS apps with DoControl, you must have **admin** credentials. The integrator for each SaaS app needs to have these relevant prerequisites:

<table><thead><tr><th width="188">App</th><th>Integrator prerequisite</th></tr></thead><tbody><tr><td>Bamboo</td><td><ul><li>Integrator has set up a dedicated user for the integration</li><li><p>Integrator must have the following <strong>read-only</strong> permissions:</p><ul><li>Basic Info</li><li>Employment Status</li><li>Job Information</li></ul></li></ul></td></tr><tr><td>Box</td><td><ul><li>Admin or co-admin (group admin is not enough)</li><li>Co-admin user has all the <a href="/docontrol-user-guide/integrations/box.md#troubleshooting">required permissions</a></li></ul></td></tr><tr><td>CrowdStrike</td><td><ul><li>CrowdStrike Falcon administrator role</li><li>Admin user has the <a href="/docontrol-user-guide/integrations/integrations-crowdstrike.md#required-permission-scopes">required permissions</a></li></ul></td></tr><tr><td>Dropbox</td><td>Team admin</td></tr><tr><td>GitHub</td><td>Admin user has the <a href="/docontrol-user-guide/integrations/github.md#required-permission-scopes">required permissions</a></td></tr><tr><td>Google Workspace</td><td><ul><li><p>Depending on the scope you are integrating:</p><ul><li>Custom admin (Google Drive integration) OR</li><li>Super admin (shadow apps)</li></ul></li><li>Log into Google Workspace at least once as an <a href="https://docs.docontrol.io/docontrol-user-guide/integrations/integrations-google-drive/first-time-integration/create-google-admin-account#google-drive-admin">admin user</a></li><li>Admin user has the <a href="/docontrol-user-guide/integrations/integrations-google-drive.md#permission-scopes">required permissions</a></li></ul></td></tr><tr><td>HiBob</td><td><ul><li><a href="/docontrol-user-guide/integrations/hris/hibob.md#create-service-user">Create service user </a>in Bob</li><li><a href="/docontrol-user-guide/integrations/hris/hibob.md#create-permission-groups">Create permission groups</a> in Bob</li></ul></td></tr><tr><td>Jira Software</td><td><ul><li>Administer the Cloud site OR Administer Jira</li><li>Admin user has the <a href="/docontrol-user-guide/integrations/jira-software.md#jira-permissions">required permissions</a></li></ul></td></tr><tr><td>Microsoft Entra ID</td><td><ul><li>Global administrator OR Privileged role administrator</li><li><a href="/docontrol-user-guide/integrations/microsoft-365.md#required-permission-scopes">Microsoft 365</a> required permissions</li></ul></td></tr><tr><td>Okta</td><td><ul><li>Okta administrator</li><li>Admin user has the <a href="/docontrol-user-guide/integrations/integrations-okta.md#required-permission-scopes">required permissions</a></li></ul></td></tr><tr><td>OneDrive</td><td><ul><li>Global administrator OR Privileged role administrator</li><li><a href="/docontrol-user-guide/integrations/microsoft-365.md#required-permission-scopes">Microsoft 365</a> required permissions</li></ul></td></tr><tr><td>Salesforce</td><td><ul><li>System administrator</li><li>Admin user has the <a href="/docontrol-user-guide/integrations/salesforce.md#set-up-permissions-in-salesforce">required permissions</a></li></ul></td></tr><tr><td>SharePoint</td><td><ul><li>Global administrator OR Privileged role administrator</li><li><a href="/docontrol-user-guide/integrations/microsoft-365.md#required-permission-scopes">Microsoft 365</a> required permissions</li></ul></td></tr><tr><td>Slack</td><td><ul><li>Workspace admin or owner</li><li>If the integrator is a Workspace admin, approval might be required from the Workspace owner</li><li>For integration with Slack Business+ and Enterprise, workspaces must be integrated separately, not at the organizational level</li></ul></td></tr><tr><td>Slack Enterprise</td><td><ul><li>Primary Org Owner (dedicated integrator account)</li><li>Primary Org Owner must be logged into Slack Enterprise before integrating with DoControl</li><li><a href="/docontrol-user-guide/integrations/slack-enterprise.md#send-email-to-slack-to-enable-integration">Send email to Slack</a> to enable DLP settings</li></ul></td></tr><tr><td>Teams</td><td><ul><li>Global administrator OR Privileged role administrator</li><li><a href="/docontrol-user-guide/integrations/microsoft-365.md#required-permission-scopes">Microsoft 365</a> required permissions</li></ul></td></tr><tr><td>Workday</td><td><ul><li><a href="https://docs.docontrol.io/docontrol-user-guide/integrations/hris/workday#create-security-group-in-workday">Create a security group in Workday</a></li><li><a href="https://docs.docontrol.io/docontrol-user-guide/integrations/hris/workday#create-integration-system-user-isu-in-workday">Create an integration system user (ISU) in Workday</a></li></ul></td></tr><tr><td>Zoom</td><td><ul><li>Zoom Owner or Zoom Admin</li><li>Pre-approve and approve apps in <a href="https://support.zoom.us/hc/en-us/articles/360027829671-Pre-approving-and-approving-apps-in-Zoom-App-Marketplace">Zoom App Marketplace</a></li></ul></td></tr></tbody></table>

{% hint style="info" %}
Make sure you follow the complete [integration steps](/docontrol-user-guide/integrations/integrations.md) for each SaaS app.
{% endhint %}

## DoControl page does not load

If the DoControl page is blank or does not load, or none of the widgets are clickable, it might be due to an IP blockage. For security reasons, certain IP addresses are blocked by DoControl's AWS WAF, including any marked as belonging to hosting providers and VPN services.&#x20;

#### **How to solve this issue**

1. Check for any proxy or MITM service running between your organization and DoControl.
2. Try a different browser or incognito/private session.
3. Clear browser cache and cookies.

## Microsoft 365 integration error

After completing the Microsoft 365 integration wizard, DoControl is still not integrated with a specific Microsoft app (OneDrive, SharePoint, Teams).

#### **How to solve this issue**

1. Make sure that DoControl is listed is a trusted app (whitelisted).
2. Activate the Microsoft 365 **audit log** before connecting to DoControl.&#x20;
   * If the Audit log is not enabled and you try connecting, you'll have to activate it, and it can take up to 12 hours for this action to take effect.
   * To verify if the Audit log is enabled, see [Turn auditing on or off](https://docs.microsoft.com/en-us/microsoft-365/compliance/turn-audit-log-search-on-or-off?view=o365-worldwide#:~:text=Use%20the%20compliance%20center%20to,recording%20user%20and%20admin%20activity).
3. When onboarding Microsoft 365, integrate apps in this order:
   1. OneDrive and SharePoint first
   2. Microsoft Entra ID (for group visibility and for OAuth protection)
   3. Teams

## Cannot integrate with SaaS app

After completing the integration wizard, and meeting all prerequisites, DoControl is still not integrated with a specific SaaS app.

#### **How to solve this issue**

* **If you login to the SaaS app with an SSO** - Make sure you login to the SaaS app via SSO **before** you start the integration procedure with DoControl.
* **If you don't use SSO to login to the SaaS app -** Make sure you log out from the SaaS app, and login **during** the integration process when prompted.

## Token expired

For some apps, if the admin user who performed the integration leaves your organization, your token will expire causing the app to disconnect from DoControl. For **Jira**, the token expires automatically after 1 year.&#x20;

#### **How to solve this issue**

If the app token expired, you need to reintegrate with DoControl by performing the [integration](/docontrol-user-guide/integrations/integrations.md) procedure again for these apps:

* Box
* CrowdStrike
* Dropbox
* GitHub
* Google Workspace
* Jira
* Okta
* Salesforce
* Slack
* Slack Enterprise
* Zoom


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docontrol.io/docontrol-user-guide/help/troubleshooting/integration-issues.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.