Skip to content

HashiCorp Vault (On-Premise) Credential Provider

The SailPoint HashiCorp Vault (On-Premise) credential provider offers credential cycling for added security in configured SailPoint connectors. This credential provider fetches refreshed, uncompromised authorization credentials from HashiCorp Vault (On-Premise) to authenticate sources in SailPoint.

This guide discusses how to manage a HashiCorp Vault (On-Premise) credential provider.

For information on creating a new HashiCorp Vault (On-Premise) credential provider, refer to Adding a New Credential Provider in SailPoint.

Prerequisites

Before you configure your credential provider, you must consider the following prerequisite items.

  • Use a supported authentication type:
    • Userpass
    • AppRole
    • JWT (Static Key)

  • If the HashiCorp Vault (On-Premise) secret server is configured to communicate using HTTPS, the required certificate needs to be in the VA server in /home/sailpoint/certificates directory.

  • For VA-based Deep Governance connectors, the source and credential provider virtual appliances must be in the same cluster.

  • VA-based Deep Governance connectors, SaaS-based Deep Governance, Discovery, and Quick Compliance connectors now support the use of credential providers.

Supported Platforms

This credential provider supports the following platforms:

  • HashiCorp Vault (On-Premise) version 1.16.2 or later

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.