Connect evidence sources

Before you connectCopy Anchor Link

An administrator connects each provider in Integrations. Use a dedicated credential, limit it to the production scope under review and retain its owner and rotation procedure. Each provider has one connection and one configured scope.

The connection form contains provider-specific fields and examples. Credentials belong in that form, not in evidence attachments, policy text or support messages.

Validate the connectionCopy Anchor Link

1. Grant the permissions in the provider's article.
2. Enter the account identifiers, credential and production scope.
3. Save and run the connection check.
4. Run evidence collection and inspect the result on an affected control.

A healthy connection confirms access. It does not establish that every control passes. Missing permissions, incomplete pagination and unsupported checks require review.

Choose evidence sourcesCopy Anchor Link

Use the control's source settings to select supplemental providers. These checks become required only after selection; collect a fresh run afterward. See automated evidence for freshness and required-check behavior.

Rotate or remove accessCopy Anchor Link

Update the credential and run the connection check again after rotation. Disconnecting Sparta does not revoke the credential at its provider. Revoke it there when retiring the connection.

Notification and issue-creation credentials are separate from evidence credentials. Grant write access only for the specific workflow that needs it.