Cyber-Ark Privileged Identity Management API

Do anybody know if there is any sort of API available for Cyber-Ark Privileged Identity Management to integrate it with an enterprise applications?

53.2k 38 38 gold badges 147 147 silver badges 202 202 bronze badges asked Jan 12, 2012 at 15:11 99 1 1 gold badge 1 1 silver badge 4 4 bronze badges

4 Answers 4

I think the answer might be 50% yes, 50% no. Definitely Cyber-Ark offers web services and an API for their Vault objects, so you should be able to retrieve passwords from the Vault from a trusted application. There is a paragraph of sales information on Cyber-Ark's website:

Cyber-Ark's comprehensive SDK provides an interface to the Vault objects that you can use to develop custom solutions that work with the Vault. Cyber-Ark provides a variety of SDK such as Command Line Interface, ActiveX API, .Net API and Web Services API

But beyond working with their Vault objects, I'm not entirely sure. I'm currently looking for more information on their Vault web services, and I think I need to register to be a Partner to get that information. I'll post a follow-up if I learn anymore.

answered Feb 10, 2012 at 15:45 Peder Rice Peder Rice 1,784 3 3 gold badges 29 29 silver badges 51 51 bronze badges

Just to clarify, we are a customer of Privileged Identity Management, but we are only interested in pulling data out of the Password Vault

Commented Feb 10, 2012 at 15:52

And I do have a follow-up: I was only able to access Cyber-Ark passwords using what is effectively screen-scraping. Cyber-Ark's vault access provides a .ashx interface that supports simple POST requests; if you provide the Vault ID and the User ID you're after, it returns a single line of text that includes the password. I can post what I have to GitHub so that you can take a look.

Commented Oct 2, 2013 at 7:17 can you post that? I'd love to see how you were able to do that. Thanks! Commented Nov 20, 2013 at 18:32

@PederRice Can we able to access the vault using PHP Script? if not will the Web Services API helpful for the alternative?

Commented Jan 4, 2014 at 19:53 link ends with asp you missing X in the end-- aspx cyber-ark.com/digital-vault-products/sim-suite/… Commented May 11, 2014 at 9:22

You are suppose to purchase an API license per server to have read-only access to the vault for authorized applications.

They provide Java, C#, etc. libraries and you place authorization key material on the server to enable it access.

answered Oct 16, 2013 at 14:11 21 1 1 bronze badge

It is called CyberArk Application Identity Manager, an entire sub-product. The only reference I could find:

answered Oct 14, 2016 at 15:19 2,661 1 1 gold badge 26 26 silver badges 25 25 bronze badges

CyberArk created Conjur. It is open source and free. It contains its own Vault and is intended for dynamic Application Access Management. In particular, Conjur and its upgrade Conjur Enterprise should secure the complete DevOps pipeline. The paid version can be integrated with the Vault solution (the PAS Core solution of CyberArk).

For static applications, CyberArk has the Credential Provider, Central Credential Provider and ASCP (I forgot the full name of it now). These solutions are agent based while Conjur is agentless. Because they are agent based, they are only intended for environments with comparatively slow changes as an agent needs to be installed on every server in order to provide the credentials from the Vault.

These solutions have REST API, CLI and SDK capabilities.

answered Jan 30, 2020 at 22:35 2,890 3 3 gold badges 27 27 silver badges 41 41 bronze badges

Related

Hot Network Questions

Subscribe to RSS

Question feed

To subscribe to this RSS feed, copy and paste this URL into your RSS reader.

Site design / logo © 2024 Stack Exchange Inc; user contributions licensed under CC BY-SA . rev 2024.9.16.15344