# Connecting SailPoint and Delinea Secret Server PAM

Complete the following tasks to connect SailPoint and Delinea Secret Server PAM:

## Adding Discovery Connector in SailPoint

Discovery connectors have categories that encompass a group of discovery sources to find enterprise applications. You can automatically discover enterprise applications using discovery sources, which search for applications your organization has on-boarded or can on-board. For more information, refer to [Discovering Enterprise Applications](<https://documentation.sailpoint.com/saas/help/ai/app_onboarding/app_discovery.html#discovering-applications-automatically>).

1. Go to **Admin \> Connections \> Discovery Connectors**.
2. Select **Create Connector**.
3. Select **Connector Category**.
4. Select **Continue**.
5. Search for a source type and select **Configure**.
6. Review the directions and select **Start Connector Setup**.
7. Review the pre-populated source name, source owner, and description. To update, select **Edit**.

   > **Note**
   >
   > Source name must be unique.
8. (Optional) If enabled for your organization, select the **Use a Credential Provider** checkbox to manage the source's authentication using a credential provider.

   > **Note**
   >
   > To add a Credential Provider in SailPoint, go to **Admin \> Connections \> Credential Providers**. For more information about credential providers, refer to [Credential Providers](<https://documentation.sailpoint.com/connectors/help/credential_providers.html>).
9. Configure the authentication to allow SailPoint to connect to the source. For more information, refer to the **Connection Settings** page.
10. Select **Finish**. A test connection is performed in the background.
11. If the test connection is successful, your source is created, and you are prompted to run a discovery.

    - If you want to discover applications now, select **Discover**.

      - **Additional Settings \> Discovery Settings** - The latest application discovery history is shown.
      - **Additional Settings \> Discovery Activity** - Discovered applications are listed.
    - If you want to discover applications later, select **Cancel**. As no discovery has taken place, in the source details:

      - **Additional Settings \> Discovery Settings** - The latest application discovery history is blank.
      - **Additional Settings \> Discovery Activity** - No discovered applications are listed.

      You are navigated to the **Sources** page, where the source created is listed.

## Base Configuration

Provide the base configuration parameters. Information you entered in the Connector Setup dialog is automatically entered into the fields in the Base Configuration page. You can edit this information, if necessary.

> [!NOTE]
>
> Ensure that the name and description of each connector is unique.

1. Enter a descriptive **Connector Name** for the connection.
2. Enter the **Description** that provides details necessary to distinguish it from similar connection sources.
3. In **Connector Owner**, enter the name of the owner responsible for administrating, operating and managing the source system.
4. (Optional) Select the **Use a Credential Provider** checkbox to retrieve the connection credentials from a configured credential provider instead of entering them directly on the **Connection Settings** page.
5. Select **Save**.

## Connection Settings

The connector authenticates with Delinea Secret Server PAM to access secret and permission data. On the **Connection Settings** page, you define how the connector authenticates to Delinea by using OAuth 2.0 and which platform-level attributes the API connection requires.

### OAuth 2.0 Authentication

The connector uses OAuth 2.0 as the default authentication method to connect to Delinea Secret Server PAM. Use the credentials that you generated when you created the Delinea **Service User** and registered the application to configure the connection.

Enter the following attribute values:

| Attribute | Description |
| --- | --- |
| **Host URL** (`hosturl`) | The base URL of your Delinea Secret Server instance that the connector uses for secret discovery. |
| **OAuth Token URL** (`oauthTokenUrl`) | The base URL of your Delinea Identity Platform tenant that the connector uses to obtain OAuth tokens. |
| **Client ID** (`clientId`) | The username of the Service User created on the Delinea Platform. The connector uses this as the OAuth 2.0 client identifier. |
| **Client Secret** (`clientSecret`) | The password of the Service User created on the Delinea Platform. The connector uses this as the OAuth 2.0 client secret to obtain access tokens. |

To configure the connection settings:

1. Enter the **Host URL**.
2. Enter the **OAuth Token URL**.
3. Enter the **Client ID**.
4. Enter the **Client Secret**.
5. (Optional) Enter the **Page Size**.

## Review and Test

Follow these steps to verify connectivity:

1. Go to the **Review and Test** page.
2. Review the configuration details for accuracy.
3. If any information is incorrect, return to the relevant section and update the fields.
4. Select **Test Connection**.

You see a success message when the test succeeds. If the test fails, review your **Connection Settings** and **Base Configuration**.