Skip to content

Integrating SailPoint with CyberArk Privilege Cloud Shared Services SaaS

Integration

This is an integration and requires additional licensing or subscriptions to utilize it. For more information, contact your customer success manager.

SailPoint and the Privileged Account Management source for CyberArk Privilege Cloud Shared Services SaaS provides a capability of deep governance for Accounts and Groups (Safes). This integration is capable of end-to-end life cycle management.

This guide is designed to give specific information about the requirements and field definitions needed to get a working connection to CyberArk Privilege Cloud Shared Services SaaS in SailPoint.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The SailPoint CyberArk Privilege Cloud Shared Services SaaS connector supports the following features:

Note

Before you can use any item marked with an asterisk (*), SailPoint must activate the feature for your site.

Account Management

  • Aggregation (Internal and External Users)
  • Refresh account
  • Create account provisioning (Local Users)
  • Enable/disable account provisioning
  • Delete accounts

  • Add/remove entitlement(s)

    Note

    The SailPoint CyberArk Privilege Cloud Shared Services SaaS connector uses PUT method to add Users to Groups via the Groups endpoint.

Entitlement Management (Groups)

  • Aggregation group(s)
  • Single group aggregation
  • Aggregate container / safes permissions as direct permissions

For more information on features, refer to Source Features.

Supported Use Cases

The following use cases are facilitated by the CyberArk Privilege Cloud Shared Services SaaS connector:

Read Operation

  • Fetch local and external users from the PAM system.

    Local users refers to users locally residing in PAM. External users refers to users synced from external managed system to PAM systems.

  • Fetch local groups from the PAM system.

  • View Safes/Containers and its permissions assigned to groups.

Provisioning

  • Create local users on the PAM system.
  • Add or remove internal and external users from local groups. This indirectly assigns and revokes Safes and its associated permissions.
  • Enable or disable internal and external users residing on the PAM system.

Supported Managed Systems

The CyberArk Privilege Cloud Shared Services SaaS connector supports the following managed system:

  • CyberArk Privilege Cloud Shared Services

Prerequisites

  • You must have the CyberArk Identity SCIM Server enabled on your enterprise instance. For more information, refer to CyberArk Identity's SCIM Server or reach out to your CyberArk partner.

Note

Upgrade from CyberArk Privilege Cloud to CyberArk Privilege Cloud Shared Services is not supported.

Email ID (emails.work.primary.value) is mandatory for correlating the accounts in SailPoint.

Required Permissions

For the permissions and access details, refer to SCIM Server Configuration.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.