Set up a Zuora RevPro connector

C1 provides identity governance for Zuora RevPro. Integrate your Zuora tenant with C1 for unified visibility and governance over user access.

C1 provides identity governance for Zuora RevPro (Zuora Revenue). Integrate your Zuora tenant with C1 for unified visibility and governance over user access.

Capabilities

Resource	Sync	Provision
Users
Roles

Gather Zuora credentials

The connector authenticates with an OAuth client (client ID and client secret) created for a Zuora platform user. It performs read-only API calls.

1. Sign in to your Zuora tenant and open Settings > Administration > Manage Users.

2. Select the API user to use for the integration, or create one with permission to read users and roles.

3. Under that user’s OAuth Clients, create a new client. Copy the generated Client ID and Client Secret.

4. Note your tenant’s REST base URL. It is data-center specific, for example https://rest.zuora.com, https://rest.na.zuora.com, https://rest.eu.zuora.com, or https://rest.ap.zuora.com.

Configuration fields

Field	Required	Description
tenant-base-url	Yes	Your tenant’s Zuora platform REST base URL, e.g. https://rest.zuora.com.
oauth-client-id	Yes	OAuth client ID for the Zuora platform API user.
oauth-client-secret	Yes	OAuth client secret paired with the client ID.

Synced resource types

• Users: Zuora platform users from the SCIM 2.0 user directory.
• Roles: Zuora platform roles, with one assignment entitlement per role.
• Role assignments: user-to-role memberships, emitted as grants on each role.

Special notes

• The connector reads users and roles from the Zuora platform identity layer (SCIM 2.0), not the Zuora Revenue data-integration API. The Revenue API does not expose users or roles.
• Each Zuora tenant is pinned to a data center, so the tenant base URL is required and there is no single shared base URL.
• The OAuth token endpoint is derived from the tenant base URL. Access tokens are short-lived and refreshed automatically.
• On rate limit responses, the connector follows the Retry-After header.

Configure the Zuora RevPro connector

Cloud-hosted

Follow these instructions to use a built-in, no-code connector hosted by C1.

1. In C1, navigate to Integrations > Connectors and click Add connector.

2. Search for Zuora RevPro and click Add.

3. Choose how to set up the new connector and set the owner.

4. Click Next.

5. Find the Settings area of the page and click Edit.

6. Enter the Zuora credentials:

   • Tenant Base URL: your tenant’s REST base URL.
   • Client ID: the OAuth client ID.
   • Client Secret: the OAuth client secret.
7. Click Save.

8. The connector’s label changes to Syncing, followed by Connected. You can view the logs to ensure that information is syncing.

Done. Your Zuora RevPro connector is now pulling access data into C1.

Self-hosted

Follow these instructions to run the connector in your own environment.

1. Create secrets for the Zuora client ID and client secret.

2. Configure the connector environment variables:

   • BATON_TENANT_BASE_URL: your tenant’s REST base URL.
   • BATON_OAUTH_CLIENT_ID: the OAuth client ID.
   • BATON_OAUTH_CLIENT_SECRET: the OAuth client secret.
3. Deploy the connector using your standard self-hosted connector process.

Done. Your Zuora RevPro connector is now pulling access data into C1.