Description
Manage CyberArk's DPA Strong Accounts stored in Self Hosted Vault.
Vendor
This platform is designed for remote account management for the following target:
| Vendor | CyberArk |
|---|---|
| Product | DPA Strong Accounts |
| Product Category | SaaS Software |
| Product Versions |
CyberArk
This platform works with the following CyberArk versions:
| CyberArk Solution | Privileged Credentials Management |
|---|---|
| CyberArk Product | Central Policy Manager (CPM) |
| CyberArk Versions | 9.x, 10.x, 11.x, 12.x |
| Artifact Version | 1.0 |
| Out of the Box | NO |
| Out of the Box in versions | |
| Available in Privilege Cloud | NO |
Support & Certification
| Support Level | STANDARD |
|---|---|
| Developed by | CyberArk |
| Certification Level | CERTIFIED |
| Connection Methods | HTTP/HTTPS |
Actions
The following table lists the supported management actions for this platform:
| Action | Supported | Permissions |
|---|---|---|
| Verify | NO | |
| Change | YES | |
| Reconcile | NO | |
| Delete | NO |
Linked Accounts
The following linked accounts are in use by the plugin.
Logon Account
| Supported | YES |
|---|---|
| Required | YES |
| Platforms | |
| Permissions |
Reconcile Account
| Supported | NO |
|---|---|
| Required | NO |
| Platforms | |
| Permissions |
Prerequisites
The following prerequisites are required on the machine that runs this plugin :
- HTTP/HTTPS connection from the CPM machine to both the CyberArk Identity Security platform (for calling the APIs Start the authentication process and Advance the authentication to obtain a token) and DPA Strong Account API. To validate, make sure the machine has access to:
<subdomain>.cyberark.cloud
<subdomain>-jit.cyberark.cloud
<tenant>.id.cyberark.cloud
Import Platform
See Import a platform package topic within CyberArk Docs online
Associate Usage Platform to Master Platform
In the relevant Master Platform under the UI & Workflows parameters, add the ID of the usage platform in the list of Usages. For more information, see Edit a platform.
Configuration
Platform Settings
Specify the following parameters at the platform level:
| Parameter Name | Description | Acceptable Values | Default Value |
|---|---|---|---|
| Port | Port used to connect to the target API. When set to -1, the port will not be used. | Integer | -1 |
| UseSSLForHTTP | This will determine whether to use HTTPS or HTTP. It can only bypass a certificate warning by setting IgnoreUntrustedCertificate. | Yes, No, IgnoreUntrustedCertificate | Yes |
| Debug | To enable debug logs. | Yes, No | No |
Account Settings
Account Mandatory Parameters
Specify the following parameters on the account:
| Parameter Name | Description |
|---|---|
| Subdomain | DPA tenant's subdomain |
| AccountID | Account ID of the DPA strong instance |
Master Account Mandatory Parameters
Specify the following parameters on the master account:
| Parameter Name | Description |
|---|---|
| Username | Username of the DPA Strong Account |
Logon Account Mandatory Parameters
The logon account should be stored on the CyberArk Identity platform. Specify the following parameters on the account:
| Parameter Name | Description |
|---|---|
| Username | Username of the logon account used to authenticate to the CyberArk Identity Security Platform |