Delinea Secret Server (Cloud) - Secrets Manager Secret Path Expressions

For information on how to configure the Delinea Secret Server (Cloud) - Secrets Manager credential provider, refer to Delinea Secret Server (Cloud) - Secrets Manager.

Username

Path syntax: {Folder_path}/{secretKey}

Before Encoding

Using Folder Name:

secrets://delinea-vault/folder1/cred/applicationName/directoryName/Username

Important

The URL path should always start with the prefix, secrets://. Each part of the URL should be URL-encoded. Each URL attribute in the path is case-sensitive.

After Encoding

After you encode the URL path, it should appear as follows:

Using Folder Name:

secrets://delinea-vault/folder1%2Fcred%2FapplicationName%2FdirectoryName/Username

The following is an explanation of the attributes of this URL:

delinea-vault - Configured Credential Provider in the Credential Provider Section.
folder1%2Fcred%2FapplicationName%2FdirectoryName - Folder path.
Username - Secret Key which needs to be fetched from the Delinea Secret Server (Cloud) - Secrets Manager.

Tip

Use urlencoder.org to encode your URL attributes.

Password

Path syntax: {Folder_path}/{secretKey}

Before Encoding

Using Folder Name:

secrets://CredentialProviderName/Folder 1\Folder 2\SecretName/Password

Important

The URL path should always start with the prefix, secrets://. Each part of the URL should be URL-encoded. Each URL attribute in the path is case-sensitive.

After Encoding

After you encode the URL path, it should appear as follows:

Using Folder Name:

secrets://CredentialProviderName/Folder%201%5CFolder%202%5CSecretName/Password

The following is an explanation of the attributes of this URL:

delinea-vault - Configured Credential Provider in the Credential Provider Section.
Folder%201%5CFolder%202%5CSecretName - Folder path.
Password - Secret Key which needs to be fetched from the Delinea Secret Server (Cloud) - Secrets Manager.

Tip

Use urlencoder.org to encode your URL attributes.

Prefixes and Suffixes

If any secret paths have a prefix or a suffix, you must append a query parameter to the secret path as follows:

To add a prefix - ?prefix=<prefix>. For example, if the secret value returned after evaluation is LocalAdmin, but the complete value required by the secret field is DomainOne\LocalAdmin then the secret path expression will be as follows to add the required prefix:
```
secrets://delinea-vault/folder1%2Fcred%2FapplicationName%2FdirectoryName/Username?prefix=DomainOne%5C
```
To add a suffix - ?suffix=<suffix>. For example, if the secret value returned after evaluation is localadministrator, but the complete value required by the secret field is localadminstrator@sp.com then the secret path expression will be as follows to add the required suffix:
```
secrets://delinea-vault/folder1%2Fcred%2FapplicationName%2FdirectoryName/Username?suffix=%40sp.com
```
To add a prefix and suffix - ?prefix=<prefix>&suffix=<suffix>. For example, if the secret value returned after evaluation is LocalAdmin, but the complete value required by the secret field is DomainOne\LocalAdmin@sp.com then the secret path expression will be as follows to add the required prefix and suffix:
```
secrets://delinea-vault/folder1%2Fcred%2FapplicationName%2FdirectoryName/Username?prefix=DomainOne%5C&suffix=%40sp.com
```

Important

All input parameters must be encoded.

Standard format for credential path:

secrets://{vault-name}/{folder path}/{secretKey}?prefix=someValue&suffix=someValue2

Note

The prefix and suffix are optional.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.