Skip to content

Integrating SailPoint with BeyondTrust Password Safe SaaS

Integration

This is an integration and requires additional licensing or subscriptions to utilize it. For more information, contact your customer success manager.

The SailPoint and Privileged Account Management source for BeyondTrust Password Safe SaaS provides a standardized approach to managing accounts in SailPoint.

This document is designed to give specific information about the requirements and field definitions needed to get a working instance of a BeyondTrust Password Safe SaaS source.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

This page lists the features supported by the BeyondTrust Password Safe SaaS connector. It also lists supported use cases that the connector can assist with.

Note

Before you can use any item marked with an asterisk (*), SailPoint must activate the feature for your site. For more information on opening a support ticket, refer to Working With Services.

Account Management

  • Aggregation (local and external users)

    Note

    Local users are users which reside locally in the PAM system. External users are users synced from a managed system outside of the PAM system.

  • Aggregate a single account

  • Create account through provisioning (local users only)
  • Enable and disable accounts through provisioning
  • Add and remove entitlement(s)
  • Delete accounts

Entitlement Management (groups)

  • Group aggregation
  • Aggregate a single group
  • Aggregate Container permissions as Direct permissions

Supported Use Cases

The following use cases are facilitated by the BeyondTrust Password Safe SaaS connector.

Read Operation

  • Fetch local and external users from the PAM system.
  • Fetch local groups from the PAM system.
  • View Safes / Containers and view how their permissions are assigned to groups.

Provisioning

  • Create local users on the PAM system.
  • Add or remove internal and external users from local groups. This indirectly assigns and revokes Safes and their associated permissions.
  • Enable or disable internal and external users residing on the PAM system.

For more information on features, refer to Source Features.

Prerequisites

  • The BeyondTrust Password Safe (Cloud) application as set-up in your IT environment.

Supported Managed Systems

The BeyondTrust Password Safe SaaS connector supports interactions with the managed systems listed on this page.

  • BeyondInsight version 23.3.0.813 and later

Required Permissions

For the permissions and access details, refer to BeyondTrust BeyondInsight Guides.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.