# Aha! Labs

![ahaio-logo.svg](https://assets.relyanceuat.xyz/images/docs/34791055007885/34791054971661.svg)
Aha! is a cloud-based software company that provides a suite of product development tools. It enables teams and companies to build and deliver successful products.

In order to integrate Aha! with Relyance AI you will need an Aha! **Subdomain**, **Client ID**, **Client Secret** and follow an OAuth2 flow.

#### In Aha!:

1. Login to your Aha! account.
2. Click on the settings gear icon in the top right-hand menu and select **Personal**.
3. Click on the **Developer** menu item in the left-hand navigation menu.
4. In the main window, click on the **OAuth applications** tab and click the **Register OAuth application** button.
5. In the resulting form enter: **Name**: Provide a meaningful name (e.g. Relyance Scan) **Redirect URI**: [https://root.relyance.ai/api/oauth2](https://root.relyance.ai/api/oauth2)
6. Click **Create**.
7. This will then show you the **Client ID** and **Client Secret**, copy them to be used in Relyance.
8. The Aha! Subdomain will be the subdomain found in your Aha! URL.

![Aha-3.png](https://assets.relyanceuat.xyz/images/docs/34791055007885/34791054977421.png)

![Aha-4.png](https://assets.relyanceuat.xyz/images/docs/34791055007885/34791056919309.png)

![Aha-5.png](https://assets.relyanceuat.xyz/images/docs/34791055007885/34791056921485.png)

![Aha-6.png](https://assets.relyanceuat.xyz/images/docs/34791055007885/34791054989837.png)

![Aha-7.png](https://assets.relyanceuat.xyz/images/docs/34791055007885/34791056927373.png)

#### In the Relyance AI application:

- Login to your Relyance AI account.
- Navigate to the **Settings** (bottom-left corner).
- Select **Integrations**.
- Search and locate the **Aha! Labs** integration card and click on it.
- Click on the **Add Connection** button on the top right.
- Provide a meaningful name for the integration and click on the **Add** button.
- In the **Overview** section, select the integration features you wish to enable for the integration, review the **Scope and Permission**, and **Endpoint** details and click on **Continue**. For more details, see [Integration Features](/docs/introduction-to-relyance-ai/integration-features/).

![Screenshot 2025-11-06 224837.png](https://assets.relyanceuat.xyz/images/docs/34791055007885/40929151250061.png)

[](/docs/introduction-to-relyance-ai/integration-features/)

- In the **Connection** section, provide the appropriate values and click on **Continue**,
    - **Connection Name**: This property allows you to update the integration specified in Step 6. If you have multiple integrations for the same vendor, you may want to assign distinct names to each. This helps streamline filtering by **Discovery Source** across the **Inventory**, **Visual** **Maps**, **Assets**, and **Data Flow Analysis** pages.
    - **Rescan Frequency**: This property allows you to configure how often Relyance executes scans against this Vendor connection.
    - **Business Atlas Associations** (required): the business entities or products that newly discovered third parties, services and assets from this integration are attributed to. Choose at least one from the **Select Associations** dropdown — the wizard will not advance past this step without one. For more details, see [Business Atlas](/docs/other-settings/business-atlas-overview/).

    ![Aha!_Labs_connection_20250224_183735.png](https://assets.relyanceuat.xyz/images/docs/34791055007885/34791056941965.png)

- In the **Authentication** section, provide the following information retrieved from the **In Aha!** section and click on **Authenticate**.
    - **Subdomain**
    - **Client ID**
    - **Client Secret**

    ![Screenshot 2025-11-06 224937.png](https://assets.relyanceuat.xyz/images/docs/34791055007885/40929151251725.png)

- Review the configuration summary from the **Completion** section and click on **Finish.**

![Aha!_Labs_completion_20250224_183739.png](https://assets.relyanceuat.xyz/images/docs/34791055007885/34791055000333.png)

- Confirm the integration Status reflects **Connected**

<!-- failure-modes:begin (generated from the integration catalog; do not hand-edit) -->

## If the connection reports Connected but returns nothing

These are the ways this integration comes back empty without reporting an error. Generated from the integration catalog, so it tracks what the connection actually asks for.

1. **Authorised, then empty.** The connection carries an authorisation, not a password: it stops returning data if the account that granted it loses access, its own permissions narrow, or the grant is revoked at the vendor. None of that reports an error here -- the connection keeps its last status until the next scan.
2. **A credential rotated at the vendor is not picked up here.** **Client Secret** is stored when you save the connection, so regenerating the value at the vendor breaks the next scan until it is re-pasted here. Recording the expiry on the connection means Relyance warns you before it lapses.
3. **Check the address fields before suspecting the credentials.** **Subdomain** identifies which tenant, region or host to talk to. A wrong value there fails authentication and looks exactly like a bad secret.

<!-- failure-modes:end -->

<!-- auth-methods:begin (generated from the integration catalog; do not hand-edit) -->

## Authentication methods and fields

Pick one of these under **Authentication Method** on the connection wizard's **Authentication** step. This table is generated from the integration catalog, so it always matches what the form actually asks for.

| Method | Required | Optional |
| --- | --- | --- |
| **Oauth2 / App Token** | `Subdomain`, `Client ID`, `Client Secret` (secret) | — |

<!-- auth-methods:end -->

<!-- terraform-examples:begin (generated from the integration catalog; do not hand-edit) -->

## Manage this integration with Terraform

Connections for this integration can be managed as code with the [Relyance Terraform provider](https://registry.terraform.io/providers/Relyance/relyance/latest). Non-secret fields go in `auth.params`; secret fields go in `auth.secrets_wo`, which is write-only — never stored in Terraform state. Rotate secrets by bumping `auth.secrets_wo_version`.

The **OAuth (browser authorization)** method uses a browser authorization flow, so the connection is created in the Relyance app. Manage it in Terraform afterwards by importing it (`terraform import relyance_integration_connection.example ahaio/<connection_id>`) or reading it with the `relyance_integration_connection` data source.

<!-- terraform-examples:end -->