Description

Manage Cisco ISE Internal User accounts via API

Please Note: This plug-in can manage application level-2 accounts only. These are ISE internal user accounts found under: Cisco ISE web UI > Dash Board> Administration> Identity Management > Identities > Network Access Users
This plug-in does not manage application application level-1 accounts found under: ISE web UI > Dash Board> Administration System> Admin Access> Administrators >Admin Users

Vendor

This platform is designed for remote account management for the following target:

Vendor	Cisco
Product	ISE
Product Category	Identity & Access Management
Product Versions	3.1

CyberArk

This platform works with the following CyberArk versions:

CyberArk Solution	Privileged Credentials Management
CyberArk Product	Central Policy Manager (CPM)
CyberArk Versions	CPM v10.10 or greater
Artifact Version	2.0
Out of the Box	NO

Support & Certification

Support Level	STANDARD
Developed by	CyberArk
Certification Level	CERTIFIED
Connection Methods	HTTPS

Actions

The following table lists the supported management actions for this platform:

Action	Supported	Permissions
Verify	YES	Requires Associated Reconcile Account
Change	YES	Requires Associated Reconcile Account
Reconcile	YES	Requires Associated Reconcile Account
Delete	NO

Linked Accounts

The following linked accounts are in use by the plugin.

Logon Account

Supported	NO
Required	NO
Platforms
Permissions

Reconcile Account

Supported	YES
Required	YES
Platforms
Permissions

ExtraPass2 Account

Supported	NO
Required	NO
Platforms
Permissions

Prerequisites

The following prerequisites are required on the machine that runs this plugin:

Download and install the REST API Platform from Marketplace

If you already have an older version installed , remove the platform and install the newest version from Marketplace

Installation

Import Platform

See Import a platform package topic within CyberArk Docs online.

Configuration

Platform Settings

Specify the following parameters at the platform level:

Parameter Name	Description	Acceptable Values	Default Value
ChainsFilePath	Configuration file for the REST API logic	bin\CiscoISEAPIChains.xml	bin\CiscoISEAPIChains.xml
Port	Port to use in URL/s for password management	443	443
UseSSL	Setting this property to yes will create a REST API request using HTTPS and validate a proper certificate is used. Setting this property to no will create a REST API request using HTTP. Setting this property to ignoreuntrustedcertificates will create a REST API request using HTTPS but does not require a valid certificate.	Yes/No/ignoreuntrustedcertificates	Yes
Debug	Whether to create a debug log. Useful for troubleshooting.	Yes/No	No

Account Settings

Account Mandatory Parameters

Specify the following parameters on the account:

Parameter Name	Description	Acceptable Values
Username
Address

Cisco ISE Internal Users via API