CyberArk

SentinelOne

Description

Manage SentinelOne privileged accounts.



Vendor

This platform is designed for remote account management for the following target:

VendorSentinelOne
ProductSentinelOne
Product Category

Website

Product VersionsW



CyberArk

This platform works with the following CyberArk versions:

CyberArk Solution

Privileged Credentials Management 

CyberArk Product

Central Policy Manager (CPM)

CyberArk Versions12.2 or higher
Artifact Version1.0
Out of the Box

NO

Available in Privilege Cloud

YES



Support & Certification

Support Level

STANDARD

Developed byCyberArk
Certification Level

CERTIFIED

Connection MethodsHTTP/HTTPS



Actions

The following table lists the supported management actions for this platform:

ActionSupportedPermissions
Verify

YES


Change

YES


Reconcile

NO


Delete

NO




Linked Accounts

The following linked accounts are in use by the plugin.

Logon Account

Supported

YES

Required

YES

Platforms


Permissions


Reconcile Account

Supported

NO

Required

NO

Platforms


Permissions



Prerequisites

This plugin does not require any additional prerequisites.



Installation

Import Platform

See Import a platform package topic within CyberArk Docs online.



Configuration

Platform Settings

Each privileged account set up will need a logon account associated to it, with the logon's account password containing their TOTP secret phrase. The username isn't used for this plugin. If you don't have your TOTP secret key saved off, there are two ways to obtain it:

  1. Reach out to your SentinelOne administrator and ask them to reset your TOTP. Upon next login, you will be able to enroll in multi factor authentication and have your TOTP secret key available. This will be stored as the logon account’s password.
  2. If you know your credentials - Login, navigate to Settings, and then click the checkbox next to your username. Under Actions > Reset 2FA. Proceed to logout and log back in to enroll again. Be sure to have your TOTP secret key available. This will be stored as the logon account’s password.




Account Settings

Account Mandatory Parameters

Specify the following parameters on the account:

Parameter NameDescriptionAcceptable Values
UsernameThe username of the user on the remote machine to whom this password belongs.A valid username value
AddressThe address of SentinelOne.Hostname, IPv4 or IPv6



Account Optional Parameters

Specify the following parameters on the account:

Parameter NameDescriptionAcceptable ValuesDefault Value