{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-agen-for-work/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["Notification"]},"type":"markdown"},"seo":{"title":"Segment integration","siteUrl":"https://developers.frontegg.com/","llmstxt":{"title":"Frontegg Developer Documentation","description":"Authentication, authorization, and user management for Customer Identity, plus Agen for SaaS and Agen for Work. Guides, SDKs, and API references.","sections":[{"title":"Customer Identity (CIAM)","description":"Auth, SSO, SCIM, entitlements, and user management — guides, SDKs, and APIs.","includeFiles":["ciam/**/*.md"],"excludeFiles":[]},{"title":"Agen for SaaS","description":"Agentic access and authorization for SaaS products.","includeFiles":["agen-for-saas/**/*.md"],"excludeFiles":[]},{"title":"Agen for Work","description":"Agentic access and authorization for internal and workforce use.","includeFiles":["agen-for-work/**/*.md"],"excludeFiles":[]},{"title":"Platform","description":"Shared platform overview.","includeFiles":["platform/**/*.md"],"excludeFiles":[]}],"excludeFiles":["internal-docs/**","ciam/guides/env-settings/inject-client-ip.md","CLAUDE.md",".claude/**","**/images/**"],"hide":false}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"segment-integration","__idx":0},"children":["Segment integration"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Segment is a customer data platform (CDP) that collects, cleans, and routes event data to other tools. Integrating Segment with Frontegg lets your application read and manage your sources and destinations, and read your workspace, warehouses, users and user groups, on behalf of your users — all through Frontegg's integration layer (Segment Public API). Segment's Public API authenticates with a static API token sent on every request, so there is no OAuth flow."]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Notification","attributes":{"title":"Prerequisites","type":"attention"},"children":[{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["A ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://segment.com/"},"children":["Segment"]}," workspace"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Access to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Settings → Access Management"]}," in your Segment workspace to create a Public API token"]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"connect-to-segment","__idx":1},"children":["Connect to Segment"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Segment authenticates Public API requests with a static token, sent on every request as the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Authorization: Bearer <token>"]}," header. The token's access is determined by the permissions you grant it when you create it."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"step-1-open-tokens","__idx":2},"children":["Step 1: Open Tokens"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Sign in to Segment, select your workspace, and go to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Settings → Access Management → Tokens"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"step-2-create-a-public-api-token","__idx":3},"children":["Step 2: Create a Public API token"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["+ Create Token"]}," and select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Public API token"]}," (not a Config API token). Give it a description, for example ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Frontegg Integration"]},", and grant it the access it needs — either ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Workspace Owner"]}," for full access, or a member role scoped to the resources you want to manage (see the scopes table below). Create the token."]},{"$$mdtype":"Tag","name":"Notification","attributes":{"title":"Copy your token now","type":"attention"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The token is shown only once, when it is created. Copy it immediately and store it securely — treat it like a password. If it is exposed or lost, delete it and create a new one on the same ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Tokens"]}," page."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"configure-the-frontegg-portal","__idx":4},"children":["Configure the Frontegg portal"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Once you have your Public API token, configure the integration in the Frontegg portal:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Frontegg portal"]}," and navigate to [ENVIRONMENT] → Integrations → Segment."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Paste the token into the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API Key"]}," field."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Set ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Data residency region"]}," to match your Segment workspace — ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["US"]}," (the default) or ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["EU"]},". Segment serves EU-resident workspaces on a separate host, so an EU workspace configured as US will fail to connect."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Save"]},"."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The token's permissions determine what the integration can do. Grant the token a role that covers the resources you want to work with:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Access level"},"children":["Access level"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"What the integration can do"},"children":["What the integration can do"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Workspace Owner"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Full read and write access to sources, destinations, warehouses, users, and user groups"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Source Admin / Source Read-only"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Write or read the sources the token is scoped to"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Destination Admin / Destination Read-only"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Write or read the destinations the token is scoped to"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Roles can be scoped to specific sources or destinations (optionally via labels) when you create the token. Reading workspace users and user groups requires a workspace-level role."]},{"$$mdtype":"Tag","name":"Notification","attributes":{"title":"Keep your credentials secure","type":"attention"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Never share or commit your API token to version control."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"additional-resources","__idx":5},"children":["Additional resources"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://docs.segmentapis.com/"},"children":["Segment Public API documentation"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://docs.segmentapis.com/tag/Getting-Started/#section/Get-an-API-token"},"children":["Create a Public API token"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"/agen-for-work/connectors/redirect-url"},"children":["How to get your Redirect URL"]}]}]}]}]},"headings":[{"value":"Segment integration","id":"segment-integration","depth":2},{"value":"Connect to Segment","id":"connect-to-segment","depth":3},{"value":"Step 1: Open Tokens","id":"step-1-open-tokens","depth":4},{"value":"Step 2: Create a Public API token","id":"step-2-create-a-public-api-token","depth":4},{"value":"Configure the Frontegg portal","id":"configure-the-frontegg-portal","depth":3},{"value":"Additional resources","id":"additional-resources","depth":3}],"frontmatter":{"category":"Analytics","seo":{"title":"Segment integration"}},"lastModified":"2026-08-11T08:08:59.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/agen-for-work/connectors/marketplace/segment","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}