Integrating Ironclad

Capabilities

DataGrail's Ironclad integration provides the following capabilities:

Product	Capability
Live Data Map	System Detection

Before You Start

To successfully configure this integration, please ensure you have sufficient privileges:

• DataGrail User Role: Super Admin, Connections Manager
• Ironclad User Role: Admin

Register an OAuth Client

Follow these steps to create an OAuth client in Ironclad that DataGrail will use to access your data:

1. Log in to Ironclad.

2. Select your user profile dropdown at the top right-hand corner.

3. Select Company Settings.

4. Navigate to the API Access section.

5. Select Create New Client or Add OAuth Client.

6. Enter an application name (for example, "DataGrail Integration").

7. Select Client Credentials as the grant type.

8. Configure the required scopes for data access:

   • public.records.readSchemas — Required to read record schemas
   • public.records.readRecords — Required to read record data
   • public.entities.readEntities — Required to read entity data

9. Select Save or Create.

10. Copy the Client ID and Client Secret and store them securely.

11. Identify your Service Account Email — this is the email of the user account DataGrail will use to make API requests on behalf of your organization. If your organization uses SSO/SCIM, see below for how to find a suitable email.

    My organization uses SSO/SCIM — how do I find a Service Account Email?

    You don't need a special service account. Any existing Ironclad user's email with admin or read permissions works. For SCIM-provisioned organizations, that email already exists in Ironclad. Find one using any of these options:

    Where to look	What to select
    Ironclad admin panel	Navigate to Settings → Users (or Team) and pick any admin user's email.
    Your identity provider (Okta, Azure AD, or Google Workspace)	Find the Ironclad app assignment and select a synced admin user's email.
    Your own email	If you are an Ironclad admin, use your own email.

12. From your Ironclad URL, copy your Subdomain (the text before .ironcladapp.com). For example, if your URL is https://mycompany.ironcladapp.com, your subdomain is mycompany. If you access Ironclad directly at ironcladapp.com with no subdomain, leave this blank.

Connect to DataGrail

Follow these steps to connect your Ironclad instance to DataGrail:

1. In DataGrail, navigate to Integrations and select Configure New Integration.
2. Search for and select Ironclad.
3. Enter your Ironclad Subdomain (the text before .ironcladapp.com). Leave this blank if you access Ironclad directly at ironcladapp.com.
4. Enter your Client ID.
5. Enter your Client Secret.
6. Enter your Service Account Email.
7. Select Configure Integration.

Troubleshooting

I received an authentication error when testing the connection

Verify the following:

• Your Client ID and Client Secret are correct and match what you created in Ironclad.
• Your Service Account Email is valid and belongs to a user in your Ironclad instance.
• Your Subdomain is correct (the text before .ironcladapp.com), or left blank if you use ironcladapp.com directly.
• The OAuth client has been granted all three required scopes: public.records.readSchemas, public.records.readRecords, and public.entities.readEntities.
• Your Service Account Email user account has appropriate permissions in Ironclad to access records and entities.

If you continue to experience issues, contact support@datagrail.io.

The integration connected successfully but no data is appearing

This may occur if:

• No vendor-type records exist in your Ironclad instance. DataGrail looks for records matching common vendor agreement types (MSA, SOW, SaaS License Agreement, Vendor Agreement, DPA, Order Form).
• Your vendor records do not have a populated counterparty name field.
• No entities with a relationship type of "vendor" exist in your Ironclad instance.

For more details, see the API documentation.

Next Steps

Now that you've successfully connected the integration, check out the following resources:

• Direct Contact Integrations
• Learn more about Live Data Map
• Live Data Map - System Inventory
• Inventory System Reports Overview

Technical Details

The Ironclad integration uses the Ironclad Public API.

API Documentation

Learn more about this API implementation and DataGrail functionality in our API Integration Documentation.