fix(integrations): Add Passportal integration #4942

jeremydhoon · 2025-10-31T05:35:44Z

Add support for N-Able Passportal

This PR adds authentication support for Passportal, a tool for IT teams to manage privileged access securely ("Passportal™ empowers safe, privileged access management across your devices, networks, and applications while helping you create, manage, and automate strong credentials.").

Passportal's API requires a two-step authentication process, in which the user exchanges an HMAC token and some of the HMAC parameters for an access token.

The PR includes the two-step auth provider details, as well as documentation and assets.

Successful authentication
Here's a screen recording showing that authentication succeeds only when parameters are correct.

Connection detail page (blurred raw token response omitted):

Connect documentation

Primary documentation

Add first-class N-Able Passportal integration with two-step HMAC auth

This PR introduces native support for N-Able Passportal vaults. It adds a new provider definition, wires it into the existing two-step authentication framework, and ships the associated documentation and brand assets. The change is purely additive—no existing APIs, schema, or runtime logic are altered—allowing users who manage secrets in Passportal to connect their vaults to the platform without custom scripting.

Key Changes

• Added Passportal provider entry to packages/providers/providers.yaml (defines required Client ID, Secret Key, API Key, Public Key fields)
• Auto-registered provider in the Two-Step Auth engine to enable immediate use across UI, CLI, and API
• Added passportal.svg brand asset and catalogue metadata for marketplace visibility
• Published full documentation set (overview, connection guide, code snippets) and registered it in docs/docs.json

Affected Areas

• providers manifest (packages/providers/providers.yaml)
• Two-Step Auth engine registration
• Documentation tree
• Static assets / integration catalogue

This summary was automatically generated by @propel-code-bot

docs/integrations/all/passportal.mdx

docs/integrations/all/passportal/connect.mdx

docs/integrations/all/passportal.mdx

docs/integrations/all/passportal/connect.mdx

docs/snippets/generated/passportal/PreBuiltTooling.mdx

hassan254-prog

Thanks for the contribution, small comments inline otherwise looks good.

hassan254-prog · 2025-10-31T14:31:38Z

packages/providers/providers.yaml

+        content: ${credentials.content}
+    token_response:
+        token: access_token
+        token_expiration: data.expiry_time


Suggested change

token_expiration: data.expiry_time

token_expiration: expiry_time

You can verify this by checking the Access Token Expiration under connection in the Nango dashboard. I would also check if the token refreshes when you manually refresh from nango ui.

Good catch. token_expiration: expiry_time is indeed correct.

Unfortunately I can't find a control in the Nango UI to manually refresh, but the expiry time does actually show up now.

packages/providers/providers.yaml

hassan254-prog · 2025-10-31T14:35:40Z

packages/providers/providers.yaml

+            example: mycompany.mypasswordapp.com
+            format: hostname
+            doc_section: '#step-1-find-your-passportal-base-url'
+    credentials:


Would be nice to a add an example and pattern for both apiKey and hmacToken.

Good call. I've added these.

hassan254-prog · 2025-10-31T14:56:43Z

packages/providers/providers.yaml

+        token_expiration: data.expiry_time
+        token_expiration_strategy: expireAt
+    proxy:
+        base_url: https://${connectionConfig.base_url}


Does the base_url always have a suffix passportalmsp.com, if so you can just request for the subdomain instead. with prefix: https:// and suffix : passportalmsp.com

Unfortunately the base_url is not constrained to a single suffix; Passportal's documentation shows a different suffix to our domain's suffix.

hassan254-prog · 2025-10-31T14:58:06Z

docs/integrations/all/passportal/connect.mdx

+- If your URL is `https://mycompany.passportalmsp.com/dashboard` → Your base URL is `mycompany.passportalmsp.com`
+- If your URL is `https://instance.passportalmsp.com/dashboard` → Your instance is `instance.passportalmsp.com`


Log into your Passportal dashboard, check the URL at your browser address bar, If your URL is https://mycompany.passportalmsp.com/dashboard → Your Base URL is mycompany.passportalmsp.com
This will depend on the comment below.

Nice re-wording. This is indeed consistent with the correct, full-base-URL approach we need to take here. I have adopted the suggestion.

hassan254-prog · 2025-10-31T15:01:35Z

docs/integrations/all/passportal/connect.mdx

+
+### Step 4: Enter your details in the Connect UI
+
+Once you have your **Instance Name**, **API Access Key ID**, **HMAC Token**, and **Content String**:


This doesn’t match the Connect UI form fields. To be determined based on the comment regarding base_url vs. subdomain.

Thank you. This has been made consistent, including a consistent order between fields in the docs and fields in the connect modal form.

docs/integrations/all/passportal/connect.mdx

hassan254-prog · 2025-10-31T15:21:21Z

packages/webapp/public/images/template-logos/passportal.svg

the logo should have a maximum width or height of 44px and be centered within a 62x62px container.

If Claude Code is to be believed, the SVG should now meet these requirements.

hassan254-prog · 2025-10-31T15:21:55Z

docs/integrations/all/passportal/connect.mdx

+
+1. Log into your Passportal dashboard.
+2. In the left pane, go to **Settings** > **API Keys**.
+<img src="/integrations/all/passportal/passportal-settings.png" style={{maxWidth: "450px" }}/>


Suggested change

<img src="/integrations/all/passportal/passportal-settings.png" style={{maxWidth: "450px" }}/>

<img src="/integrations/all/passportal/passportal-settings.png"/>

same as the rest.

I've removed the style={{...}} attributes.

hassan254-prog · 2025-10-31T15:24:17Z

docs/integrations/all/passportal.mdx

we have a new docs style,take a look at Sellsy (Client Credentials) as an example.

I have moved to this new style.

Co-authored-by: Hassan_Wari <[email protected]>

docs/integrations/all/passportal.mdx

propel-code-bot · 2025-11-01T12:45:28Z

docs/integrations/all/passportal/connect.mdx

+To authenticate with Passportal, you need:
+1. **Base URL** – Your Passportal instance domain (e.g., `mycompany.passportalmsp.com`).
+2. **API Access Key ID** – Your Passportal API Access Key ID.
+3. **HMAC Token** – A pre-generated HMAC-SHA256 hash token (base64 encoded).


[Documentation]

Factual inconsistency: Earlier steps create a hexadecimal HMAC hash, but this line says the token is base-64 encoded. Update to the correct encoding.

Context for Agents

[**Documentation**] Factual inconsistency: Earlier steps create a hexadecimal HMAC hash, but this line says the token is base-64 encoded. Update to the correct encoding. File: docs/integrations/all/passportal/connect.mdx Line: 11

We say "hexadecimal" or "hex" now.

propel-code-bot · 2025-11-01T12:45:29Z

docs/integrations/all/passportal/connect.mdx

+
+**Important**: The Secret access key is only viewable once in the Create access key dialog. After closing this dialog, it cannot be retrieved again.
+
+<img src="/integrations/all/passportal/api-keys.png" style={{maxWidth: "450px" }}/>


[Documentation]

Broken image path: File added is "passportal-api-keys.png" but the source here points to "api-keys.png". Update the filename or path so the image loads.

Context for Agents

[**Documentation**] Broken image path: File added is "passportal-api-keys.png" but the source here points to "api-keys.png". Update the filename or path so the image loads. File: docs/integrations/all/passportal/connect.mdx Line: 40

docs/integrations/all/passportal.mdx

docs/integrations/all/passportal/connect.mdx

jeremydhoon · 2025-11-01T13:37:32Z

Thanks @hassan254-prog -- I've done my best to address your thoughtful comments.

Add Passportal integration

519d1f9

propel-code-bot bot reviewed Oct 31, 2025

View reviewed changes

docs/integrations/all/passportal.mdx Outdated Show resolved Hide resolved

propel-code-bot bot reviewed Oct 31, 2025

View reviewed changes

docs/integrations/all/passportal/connect.mdx Outdated Show resolved Hide resolved

propel-code-bot bot reviewed Oct 31, 2025

View reviewed changes

docs/integrations/all/passportal.mdx Outdated Show resolved Hide resolved

propel-code-bot bot reviewed Oct 31, 2025

View reviewed changes

docs/integrations/all/passportal.mdx Outdated Show resolved Hide resolved

propel-code-bot bot reviewed Oct 31, 2025

View reviewed changes

docs/integrations/all/passportal/connect.mdx Outdated Show resolved Hide resolved

propel-code-bot bot reviewed Oct 31, 2025

View reviewed changes

docs/snippets/generated/passportal/PreBuiltTooling.mdx Show resolved Hide resolved

Fix typos

c32efb9

khaliqgant requested a review from hassan254-prog October 31, 2025 10:00

hassan254-prog reviewed Oct 31, 2025

View reviewed changes

Update packages/providers/providers.yaml

0330947

Co-authored-by: Hassan_Wari <[email protected]>

propel-code-bot bot reviewed Nov 1, 2025

View reviewed changes

docs/integrations/all/passportal.mdx Outdated Show resolved Hide resolved

propel-code-bot bot reviewed Nov 1, 2025

View reviewed changes

jeremydhoon added 2 commits November 1, 2025 21:23

Code review feedback

a01d162

Fix doc formats

bf3a756

propel-code-bot bot reviewed Nov 1, 2025

View reviewed changes

docs/integrations/all/passportal.mdx Outdated Show resolved Hide resolved

propel-code-bot bot reviewed Nov 1, 2025

View reviewed changes

docs/integrations/all/passportal/connect.mdx Outdated Show resolved Hide resolved

Automated code review comments

ddf3083

jeremydhoon mentioned this pull request Nov 1, 2025

fix(integrations): Add support for Auvik Networks #4941

Open

	token_expiration: data.expiry_time
	token_expiration: expiry_time

		- If your URL is `https://mycompany.passportalmsp.com/dashboard` → Your base URL is `mycompany.passportalmsp.com`
		- If your URL is `https://instance.passportalmsp.com/dashboard` → Your instance is `instance.passportalmsp.com`


		### Step 4: Enter your details in the Connect UI

		Once you have your Instance Name, API Access Key ID, HMAC Token, and Content String:

	<img src="/integrations/all/passportal/passportal-settings.png" style={{maxWidth: "450px" }}/>
	<img src="/integrations/all/passportal/passportal-settings.png"/>


		Important: The Secret access key is only viewable once in the Create access key dialog. After closing this dialog, it cannot be retrieved again.

		<img src="/integrations/all/passportal/api-keys.png" style={{maxWidth: "450px" }}/>

fix(integrations): Add Passportal integration #4942

Are you sure you want to change the base?

fix(integrations): Add Passportal integration #4942

Conversation

jeremydhoon commented Oct 31, 2025 • edited by propel-code-bot bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

hassan254-prog left a comment

Choose a reason for hiding this comment

Uh oh!

hassan254-prog Oct 31, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

propel-code-bot bot Nov 1, 2025

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

propel-code-bot bot Nov 1, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

jeremydhoon commented Nov 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

jeremydhoon commented Oct 31, 2025 •

edited by propel-code-bot bot

Loading

hassan254-prog Oct 31, 2025 •

edited

Loading