CyberArk Integration

Purpose

This document provides set up information on the CyberArk integration.

Introduction

CyberArk enables organizations to securely store and manage passwords, encryption keys, and other credentials. This helps prevent unauthorized access to sensitive systems and information.

Add New CyberArk Integration

To add a CyberArk integration:

Go to Configuration > Integration in the left hand side menu.
Click the green icon to open a new integration form.
Select CyberArk in the drop-down menu.
Fill in credentials such as Name, URL, Application ID, Default safe, Default folder.

Option	Description
Name	Name of the integration.
URL	URL to the CyberArk integration.
Application ID	CyberArk token used for authentication.
Default safe	Default value used for CyberArk safe. If this field is empty in next step (in the credentials) this value is used instead for safe.
Default folder	Default value used for CyberArk folder. If this field is empty in next step (in the credentials) this value is used instead for folder.

Only selecting an integration for credentials will not get the values from integration into credentials. You have to add jinja variables in the credentials fields.

For example, if you enter {{Content}} in the field, we will get password value from CyberArk and use that in credential.

Click the blue upload button and select a PEM-formatted certificate file. See How to Generate a .pem File with OpenSSL section on how to create a .pem file.
Click the blue ADD to save the new integration.

If both Safe and Folder field is empty then CyberArk will search in all safes and folders.
If Safe have value and Folder field is empty then Root will be default folder and Cyberark will only search in Root folder.
If Folder has value it should be the full path, like Root/Groups, Cyberark will not search in subfolders

How to Generate a .pem File with OpenSSL?

Prerequisite

You need to install OpenSSL before performing this step.

Generate the .pem File

Follow these steps to generate a .pem file using OpenSSL:

Open a command prompt or terminal.
Navigate to the directory where you want to generate the .pem file.
Run the following command to generate a private key and CSR (Certificate Signing Request) file:
openssl req -newkey rsa:2048 -nodes -keyout private.key -out csr.csr
Follow the instructions to enter the necessary information for the CSR.
Next, run the following command to create the .pem file:
openssl x509 -req -in csr.csr -signkey private.key -out certificate.pem

OpenSSL will be created in the same directory.

Link a CyberArk Integration to an Account

To link a CyberArk integration to an account:

Click the Account view in the upper right corner and select Credentials.
Click the Add Credentials button on bottom right corner.
Select Web in the drop-down menu.
Fill in the credentials.
Fill in CyberArk Object, CyberArk Safe, CyberArk Folder. If any of these are empty, the default value in the previous step is used.

Edit Credentials

To edit account’s integration:

Click the Account view in the upper right corner and select Credentials.
Click on the Edit icon inside account card.
Change the credentials and click Save.

Troubleshooting

If something goes wrong when using the credentials with integrations when scanning, an error message is displayed in the scan details.